HM2-NAT-MIB
AI MIB Summary
The HM2-NAT-MIB module enables SNMP-based monitoring and management of Hirschmann network devices to track dynamic NAT (DNAT), static NAT (SNAT), double NAT, and one-to-one NAT translation sessions and configurations. It provides visibility into active translation mappings and session states for troubleshooting connectivity and validating address translation policies on Hirschmann infrastructure.
This MIB defines the SNMP interface for Hirschmann DNAT/SNAT/ Double NAT/1:1 NAT implementations Copyright (C)
Main OID:
hm2NatMib.1.3.6.1.4.1.248.11.80
176
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
176 total| Object Name |
|---|
hm2NatMibThis MIB defines the SNMP interface for Hirschmann DNAT/SNAT/ Double NAT/1:1 NAT implementations Copyright (C) MODULE-IDENTITY .1.3.6.1.4.1.248.11.80 |
hm2NatNotifications OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.0 |
hm2DnatRuleAppliedTrapA rule of DNAT was applied. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.1 |
hm2DnatRuleAppliedAndLoggedTrapA rule of DNAT was applied and logged according to the current logging mechanism. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.2 |
hm21to1RuleAppliedTrapA rule of 1:1 NAT was applied. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.5 |
hm21to1RuleAppliedAndLoggedTrapA rule of 1:1 NAT was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.6 |
hm2MasqRuleAppliedTrapA rule of masquerading was applied. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.7 |
hm2MasqRuleAppliedAndLoggedTrapA rule of masquerading was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.8 |
hm2DonatRuleAppliedTrapA rule of double NAT was applied. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.9 |
hm2DonatRuleAppliedAndLoggedTrapA rule of double NAT was applied and logged according the current logging mechanism. The rule is identified by the given rule index of the rule table. NOTIFICATION-TYPE .1.3.6.1.4.1.248.11.80.0.10 |
hm2NatObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1 |
hm2NatGeneralSettings OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.1 |
hm2DnatMaxRulesMaximum number of allowed rules for DNAT.ro Integer32 .1.3.6.1.4.1.248.11.80.1.1.2 |
hm2OneToOneNatMaxRulesMaximum number of allowed rules for 1:1 NAT.ro Integer32 .1.3.6.1.4.1.248.11.80.1.1.3 |
hm2MasqMaxRulesMaximum number of allowed rules for Masquerading.ro Integer32 .1.3.6.1.4.1.248.11.80.1.1.4 |
hm2DoubleNatMaxRulesMaximum number of allowed rules for Double NAT.ro Integer32 .1.3.6.1.4.1.248.11.80.1.1.5 |
hm2NatResetStatisticsSetting this value to action(2) will reset the statistics of the whole NAT module. It will be set to noop(1) automatically after reset.rw HmActionValue (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.1.6 |
hm2Dnat OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2 |
hm2DnatRules OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.1 |
hm2DnatRulesObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.1.1 |
hm2DnatRuleCountNumber of current DNAT rulesro Integer32 .1.3.6.1.4.1.248.11.80.1.2.1.1.1 |
hm2DnatIfMappingRuleCountNumber of current DNAT IF mapping entries.ro Integer32 .1.3.6.1.4.1.248.11.80.1.2.1.1.2 |
hm2DnatRulePendingActionsThis value describes, whether the DNAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.2.1.1.3 |
hm2DnatCommitPendingActionsSetting this value to action(2) writes not yet committed changes to the firewall (DNAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1).rw HmActionValue (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.2.1.1.4 |
hm2DnatRulesTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.1.2 |
hm2DnatRuleTableThe list of DNAT rules for this firewall. SEQUENCE OF Hm2DnatRuleEntry .1.3.6.1.4.1.248.11.80.1.2.1.2.1 |
hm2DnatRuleEntryDNAT rule entry. Hm2DnatRuleEntry .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1 |
hm2DnatRuleIndexRule index of this DNAT rule.ro Integer32 ( 1..255 ) .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.1 |
hm2DnatSourceAddressSource address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all - a prepending '!' selects the complement setrw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.3 |
hm2DnatSourcePortThe source port of the packet to reroute. Allowed formats are: - keyword 'any' for no filtering or a protocol without ports - single port ('10') - port range with first and last port separated by hyphen ('10-15') - comma separated list of ports ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.4 |
hm2DnatTargetAddressDestination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at all - a prepending '!' selects the complement setrw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.5 |
hm2DnatTargetPortThe target port of the packet to reroute. Allowed formats are: - keyword 'any' - single port ('10') - port range with first and last port separated by hyphen ('10-15') - comma separated list of ports ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.6 |
hm2DnatNewTargetAddressThe IP address of the machine to reroute packets to. Must be a single IP address (a.b.c.d).rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.7 |
hm2DnatNewTargetPortThe port to reroute packets to. Must be a single port or 'any'.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.8 |
hm2DnatProtoThe IP protocol (RFC 791) for protocol-independent filtering. The following values are currently supported: o icmp(1): Internet Control Message Protocol (RFC 792) o igmp(2): Internet Group Management Protocol o ipip(3): IP in IP tunneling (RFC 1853) o tcp(4): Transmission Control Protocol (RFC 793) o udp(5): User Datagram Protocol (RFC 768) o esp(6): IPsec Encapsulated Security Payload (RFC 2406) o ah(7): IPsec Authentication Header (RFC 2402) o icmpv6(8): Internet Control Message Protocol for IPv6 o any(9): apply to all protocolsrw Enumeration .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.9 |
hm2DnatRuleParamsAdditional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.10 |
hm2DnatLogSet to true if application of this rule shall be logged.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.11 |
hm2DnatTrapSet to true if application of this rule shall send a trap.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.12 |
hm2DnatRowStatusThis is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.13 |
hm2DnatDescriptionUser defined textual description related to this rule.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.2.1.2.1.1.14 |
hm2DnatRuleIfMappingTableTable for mapping DNAT rules to interfaces. SEQUENCE OF Hm2DnatRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.2.1.2.2 |
hm2DnatRuleIfMappingEntryEntry in rule interface mapping table. Hm2DnatRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1 |
hm2DnatIfmRuleIndexThe index of the DNAT rule this mapping entry is assigned to. Integer32 .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.1 |
hm2DnatIfmDirectionFor DNAT, this can only be set to ingress, which is the interface on which a packet that is to be forwarded will arrive. Enumeration .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.2 |
hm2DnatIfmPriorityThe priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority).rw Unsigned32 .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.3 |
hm2DnatIfmInterfaceThe interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.4 |
hm2DnatIfmRowStatusThe RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.2.1.2.2.1.5 |
hm2DnatStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.2 |
hm2DnatGlobalStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.2.1 |
hm2DnatStatsTotalPckTotal number of packets processed by the DNAT firewall.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.1.1 |
hm2DnatStatsTotalPckSizeTotal number of bytes processed by the DNAT firewall.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.1.2 |
hm2DnatStatsTotalPckDenDropTotal number of packets dropped or denied by the DNAT firewall.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.1.3 |
hm2DnatStatsTotalPckAcceptedTotal number of packets accepted by the DNAT firewall.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.1.4 |
hm2DnatRuleStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.2.2.2 |
hm2DnatStatsRuleTableTable of per-rule statistics of the DNAT firewall. SEQUENCE OF Hm2DnatStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.2.2.2.1 |
hm2DnatStatsRuleTableEntryStatistics table entry for DNAT. Hm2DnatStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.2.2.2.1.1 |
hm2DnatStatsPckCountNumber of packets DNATed.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.1 |
hm2DnatStatsPckSizeNumber of bytes DNATed.ro Counter64 .1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.2 |
hm2DnatStatsLastAppliedTime of last application of the rule in seconds since 1.1.1970.ro HmTimeSeconds1970 (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.2.2.2.1.1.3 |
hm21to1 OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4 |
hm21to1RuleObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4.1 |
hm21to1RuleCountNumber of current 1:1 NAT rules.ro Integer32 .1.3.6.1.4.1.248.11.80.1.4.1.1 |
hm21to1IfMappingRuleCountNumber of current 1:1 NAT IF mapping entries.ro Integer32 .1.3.6.1.4.1.248.11.80.1.4.1.2 |
hm21to1RulePendingActionsThis value describes, whether the 1:1 NAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.4.1.3 |
hm21to1CommitPendingActionsSetting this value to action(2) writes not yet committed changes to the firewall (1:1 NAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1).rw HmActionValue (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.4.1.4 |
hm21to1AlgGlobal bitmask for application level gateway of all the 1:1 NAT rules.rw Bits .1.3.6.1.4.1.248.11.80.1.4.1.5 |
hm21to1PublicIntfThe index of the public interface defined on the uplink port.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.248.11.80.1.4.1.6 |
hm21to1RuleTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4.2 |
hm21to1RuleTableThe list of 1:1 NAT rules for this firewall. SEQUENCE OF Hm21to1RuleEntry .1.3.6.1.4.1.248.11.80.1.4.2.1 |
hm21to1RuleEntry1:1 NAT rule entry. Hm21to1RuleEntry .1.3.6.1.4.1.248.11.80.1.4.2.1.1 |
hm21to1RuleIndexRule index of this 1:1 NAT rule.ro Integer32 ( 1..256 ) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.1 |
hm21to1TargetAddressDestination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at allrw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.4.2.1.1.2 |
hm21to1NewTargetAddressNew Destination address of packets to be NATed. Can be: - Single address (a.b.c.d), - address range in CIDR notation (a.b.c.d/n) - the name of a Netobject ($NetobjectName) - 'any' for no filtering at allrw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.4.2.1.1.3 |
hm21to1RuleParamsAdditional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.4.2.1.1.4 |
hm21to1LogSet to true if application of this rule shall be logged.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.5 |
hm21to1TrapSet to true if application of this rule shall send a trap.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.6 |
hm21to1RowStatusThis is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.7 |
hm21to1DescriptionUser defined textual description related to this rule.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.4.2.1.1.8 |
hm21to1IngressIntfThe index of the interface on which packets going to the target address will arrive. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.9 |
hm21to1EgressIntfThe index of the interface from which the new target address can be reached. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable.rw InterfaceIndexOrZero (IF-MIB) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.10 |
hm21to1PriorityThe priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority).rw Unsigned32 .1.3.6.1.4.1.248.11.80.1.4.2.1.1.11 |
hm21to1StorageTypeThe storage type for this row. Rows having the value 'volatile' are not saved.rw StorageType (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.4.2.1.1.12 |
hm21to1Stats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4.3 |
hm21to1GeneralStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4.3.1 |
hm21to1StatsTotalPckTotal number of packets processed by 1:1 NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.1.1 |
hm21to1StatsTotalPckSizeTotal number of bytes processed by the 1:1 NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.1.2 |
hm21to1StatsTotalPckDenDropTotal number of packets dropped or denied by 1:1 NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.1.3 |
hm21to1StatsTotalPckAcceptedTotal number of packets accepted by 1:1 NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.1.4 |
hm21to1StatsTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.4.3.2 |
hm21to1StatsRuleTableTable of per-rule statistics of 1:1 NAT. SEQUENCE OF Hm2OtoStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.4.3.2.1 |
hm21to1StatsRuleTableEntryStatistics table entry for 1:1 NAT. Hm2OtoStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.4.3.2.1.1 |
hm21to1StatsPckCountNumber of packets matched by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.1 |
hm21to1StatsPckSizeNumber of bytes processed by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.2 |
hm21to1StatsLastAppliedTime of last application of the rule in seconds since 1.1.1970.ro HmTimeSeconds1970 (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.4.3.2.1.1.3 |
hm2Masquerading OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5 |
hm2MasqRuleObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5.1 |
hm2MasqRuleCountNumber of current masquerading rules.ro Integer32 .1.3.6.1.4.1.248.11.80.1.5.1.1 |
hm2MasqIfMappingRuleCountNumber of current masquerading IF mapping entries.ro Integer32 .1.3.6.1.4.1.248.11.80.1.5.1.2 |
hm2MasqRulePendingActionsThis value describes, whether the masquerading rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.1.3 |
hm2MasqCommitPendingActionsSetting this value to action(2) writes not yet committed changes to the firewall (DNAT and Interface Mapping Table). After writing all modifications, the value switches automatically back to noop(1).rw HmActionValue (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.5.1.4 |
hm2MasqRuleTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5.2 |
hm2MasqRuleTableThe list of masquerading rules for this firewall. SEQUENCE OF Hm2MasqRuleEntry .1.3.6.1.4.1.248.11.80.1.5.2.1 |
hm2MasqRuleEntryMasquerading rule entry. Hm2MasqRuleEntry .1.3.6.1.4.1.248.11.80.1.5.2.1.1 |
hm2MasqRuleIndexRule index of this masquerading rule.ro Integer32 ( 1..128 ) .1.3.6.1.4.1.248.11.80.1.5.2.1.1.1 |
hm2MasqSourceAddressThe source address of the packets to reroute. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8') - a prepending '!' selects the complement setrw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.5.2.1.1.2 |
hm2MasqSourcePortThe source port of the packet to reroute. Allowed formats are: - keyword 'any' - single ('10') - range with first and last separated by hyphen ('10-15') - comma separated list of s ('1235,25,123') - combination of the points above ('10,25-30,125,1993') The number of named ports (1 for each individual port, 2 for port ranges) must not exceed 15.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.5.2.1.1.3 |
hm2MasqProtoThe IP protocol (RFC 791) for protocol-independent filtering. The following values are currently supported: o tcp(4): transmission control protocol (RFC 793) o udp(5): user datagram protocol (RFC 768) o any(9): apply to all protocolsrw Enumeration .1.3.6.1.4.1.248.11.80.1.5.2.1.1.4 |
hm2MasqRuleParamsAdditional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.5.2.1.1.5 |
hm2MasqLogSet to true if application of this rule shall be logged.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.2.1.1.6 |
hm2MasqTrapSet to true if application of this rule shall send a trap.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.2.1.1.7 |
hm2MasqRowStatusThis is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.2.1.1.8 |
hm2MasqDescriptionUser defined textual description related to this rule.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.5.2.1.1.9 |
hm2MasqIpsecExemptSet to true if application of this rule should ignore IPsec traffic.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.2.1.1.10 |
hm2MasqRuleIfMappingTableTable for mapping masquerading rules to interfaces. SEQUENCE OF Hm2MasqRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.5.2.2 |
hm2MasqRuleIfMappingEntryEntry in rule interface mapping table. Hm2MasqRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.5.2.2.1 |
hm2MasqIfmRuleIndexThe index of the 1:1 NAT rule this mapping entry is assigned to. Integer32 .1.3.6.1.4.1.248.11.80.1.5.2.2.1.1 |
hm2MasqIfmDirectionFor masquerading, this can only be set to egress which is the interface packets will be masqueraded to. Enumeration .1.3.6.1.4.1.248.11.80.1.5.2.2.1.2 |
hm2MasqIfmPriorityThe priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority).rw Unsigned32 .1.3.6.1.4.1.248.11.80.1.5.2.2.1.3 |
hm2MasqIfmInterfaceThe interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.248.11.80.1.5.2.2.1.4 |
hm2MasqIfmRowStatusThe RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.5.2.2.1.5 |
hm2MasqStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5.3 |
hm2MasqGeneralStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5.3.1 |
hm2MasqStatsTotalPckTotal number of packets processed by Masqueradingro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.1.1 |
hm2MasqStatsTotalPckSizeTotal number of bytes processed by Masqueradingro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.1.2 |
hm2MasqStatsTotalPckDenDropTotal number of packets dropped or denied by Masqueradingro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.1.3 |
hm2MasqStatsTotalPckAcceptedTotal number of packets accepted by masquerading.ro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.1.4 |
hm2MasqStatsRuleTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.5.3.2 |
hm2MasqStatsRuleTableTable of per-rule statistics of masquerading. SEQUENCE OF Hm2MasqStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.5.3.2.1 |
hm2MasqStatsRuleTableEntryStatistics table entry for masquerading. Hm2MasqStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.5.3.2.1.1 |
hm2MasqStatsPckCountNumber of packets matched by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.1 |
hm2MasqStatsPckSizeNumber of bytes processed by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.2 |
hm2MasqStatsLastAppliedTime of last application of the rule in seconds since 1.1.1970ro HmTimeSeconds1970 (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.5.3.2.1.1.3 |
hm2DoubleNat OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6 |
hm2DoubleNatRuleObjects OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6.1 |
hm2DoubleNatRuleCountCurrent number of rules for double NAT.ro Integer32 .1.3.6.1.4.1.248.11.80.1.6.1.1 |
hm2DoubleNatIfMappingRuleCountNumber of current double NAT IF mapping entries.ro Integer32 .1.3.6.1.4.1.248.11.80.1.6.1.2 |
hm2DoubleNatRulePendingActionsThis value describes, whether the double NAT rule table was modified but not yet written to the firewall implementation (set to true). After writing all modifications to the firewall, the value switches automatically back to false.ro TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.6.1.3 |
hm2DoubleNatCommitPendingActionsSetting this value to action(2) writes not yet committed changes to the firewall (double NAT and interface mapping table). After writing all modifications, the value switches automatically back to noop(1).rw HmActionValue (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.6.1.4 |
hm2DoubleNatRuleTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6.2 |
hm2DoubleNatRuleTableTable of double NAT rules. SEQUENCE OF Hm2DoubleNatRuleEntry .1.3.6.1.4.1.248.11.80.1.6.2.1 |
hm2DoubleNatRuleEntryEntry within double NAT rule table. Hm2DoubleNatRuleEntry .1.3.6.1.4.1.248.11.80.1.6.2.1.1 |
hm2DonatRuleIndexIndex of the rule within table.ro Integer32 .1.3.6.1.4.1.248.11.80.1.6.2.1.1.1 |
hm2DonatLocalInternalIpThe real IP address of the first net/machine you want to double NAT. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8')rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.2 |
hm2DonatLocalExternalIpThe IP address where you want the first net/machine to be reachable from the second net/machine. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8')rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.3 |
hm2DonatRemoteInternalIpThe real IP address of the second net/machine you want to double NAT. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8')rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.4 |
hm2DonatRemoteExternalIpThe IP address where you want the second net/machine to be reachable from the first net/machine. Allowed formats are: - keyword 'any' - IP address ('10.0.0.1') - IP address range ('10.0.0.0/8')rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.5 |
hm2DonatRuleParamsAdditional parameters to this rule as string. Currently only the value 'none' is valid. Reserved for future use.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.6 |
hm2DonatLogSet to true if application of this rule shall be logged.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.6.2.1.1.7 |
hm2DonatTrapSet to true if application of this rule shall send a trap.rw TruthValue (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.6.2.1.1.8 |
hm2DonatRowStatusThis is a standard row status value: - active(1): The rule is active. Note that until committed, the rule will not be applied. - notInService(2): The rule is inactive because of user action. - notReady(3):The rule is inactive because it has an incomplete configuration. - createAndGo(4): Create the rule with default parameters activated. - createAndWait(5): Create the rule inactive. - destroy(6): Delete the rule. You cannot delete a rule with interface mappings to it.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.6.2.1.1.9 |
hm2DonatDescriptionUser defined textual description related to this rule.rw DisplayString ( SIZE .1.3.6.1.4.1.248.11.80.1.6.2.1.1.10 |
hm2DonatRuleIfMappingTableTable for mapping double NAT rules to interfaces. SEQUENCE OF Hm2DonatRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.6.2.2 |
hm2DonatRuleIfMappingEntryEntry in rule interface mapping table. Hm2DonatRuleIfMappingEntry .1.3.6.1.4.1.248.11.80.1.6.2.2.1 |
hm2DonatIfmRuleIndexThe index of the double NAT rule this mapping entry is assigned to. Integer32 .1.3.6.1.4.1.248.11.80.1.6.2.2.1.1 |
hm2DonatIfmDirectionMeanings: - ingress(1): The first net/machine can be reached through this interface - egress(2): The second net/machine can be reached through this interface - both(3): Both machines/nets can be reached through this interface Enumeration .1.3.6.1.4.1.248.11.80.1.6.2.2.1.2 |
hm2DonatIfmPriorityThe priority is the sorting key for rules in the chain to this interface. They don't need to be unique per interface, but in that case, no clear order can be assumed. Priorities are processed in ascending order (0 highest priority).rw Unsigned32 .1.3.6.1.4.1.248.11.80.1.6.2.2.1.3 |
hm2DonatIfmInterfaceThe interface this mapping entry is assigned to. This has to be either an hm2AgentSwitchIpInterfaceIfIndex or an hm2AgentSwitchIpVlanIfIndex. Note that for physical interfaces this only works if the corresponding hm2AgentSwitchIpInterfaceRoutingMode is set to enable. InterfaceIndex (IF-MIB) .1.3.6.1.4.1.248.11.80.1.6.2.2.1.4 |
hm2DonatIfmRowStatusThe RowStatus value for this entry with the usual meanings: - active(1): The interface mapping is in place - notInService(2): The interface mapping is not in place because the user said so - notReady(3): The interface mapping is not in place because the agent said so - createAndGo(4): Create this mapping with the default priority and activate it. - createAndWait(5): Create this mapping deactivated. - destroy(6): Destroy this interface mapping.rw RowStatus (SNMPv2-TC) .1.3.6.1.4.1.248.11.80.1.6.2.2.1.5 |
hm2DonatStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6.3 |
hm2DonatGeneralStats OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6.3.1 |
hm2DonatStatsTotalPckTotal number of packets processed by double NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.1.1 |
hm2DonatStatsTotalPckSizeTotal number of bytes processed by double NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.1.2 |
hm2DonatStatsTotalPckDenDropTotal number of packets dropped or denied by double NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.1.3 |
hm2DonatStatsTotalPckAccTotal number of packets accepted by double NAT.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.1.4 |
hm2DonatStatsRuleTables OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.1.6.3.2 |
hm2DonatStatsRuleTableTable of per-rule statistics of double NAT. SEQUENCE OF Hm2DonatStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.6.3.2.1 |
hm2DonatStatsRuleTableEntryStatistics table entry for double NAT. Hm2DonatStatsRuleTableEntry .1.3.6.1.4.1.248.11.80.1.6.3.2.1.1 |
hm2DonatStatsPckCountNumber of packets matched by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.1 |
hm2DonatStatsPckSizeNumber of bytes processed by this rule.ro Counter64 .1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.2 |
hm2DonatStatsLastAppliedTime of last application of the rule in seconds since 1.1.1970.ro HmTimeSeconds1970 (HM2-TC-MIB) .1.3.6.1.4.1.248.11.80.1.6.3.2.1.1.3 |
hm2NatConformance OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.2 |
hm2NatCompliances OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.2.1 |
hm2NatComplianceThe compliance statement for an SNMP entity which implements the Hirschmann NAT MIB. Unknown .1.3.6.1.4.1.248.11.80.2.1.1 |
hm2NatGroups OBJECT IDENTIFIER .1.3.6.1.4.1.248.11.80.2.2 |
hm2NatGeneralGroupA collection of all Hirschmann objects provided by the Firewall module. Unknown .1.3.6.1.4.1.248.11.80.2.2.1 |
hm2NatNotificationsGroupA collection of all Hirschmann notifications provided by the NAT module. Unknown .1.3.6.1.4.1.248.11.80.2.2.2 |