NAT translation list from 7600

[piero.spinnato]

Hi,

I have a 7602 from which I need to get a list of the IP addresses defined as 1-to-1 NAT static translation targets. Namely, those defined by ip nat inside source static.

Probably SNMP could help, but how can I do that?

Any suggestion is very welcome.

Thanks in advance, cheers

Piero

[Mahabir Prasad]

Hi Peiro

You can use CISCO-IETF-NAT-MIB for this purpose as shown below.

.1.3.6.1.4.1.9.10.77.1.2

+--cnatSessionTable(5) detail

    |

    +--cnatSessionEntry(1) detail

    |  |

    |  +-- ---- UInteger  cnatSessionBindId(1)

    |  +-- ---- UInteger  cnatSessionId(2)

    |  +-- -R-- EnumVal   cnatSessionDirection(3)

    |  |        Values: inbound(1), outbound(2)

    |  +-- -R-- Timeticks cnatSessionUpTime(4)

    |  +-- -R-- EnumVal   cnatSessionProtocolType(5)

    |  |        Textual Convention: NATProtocolType

    |  |        Values: other(1), icmp(2), udp(3), tcp(4)

    |  +-- -R-- IpAddr    cnatSessionOrigPrivateAddr(6)

    |  +-- -R-- IpAddr    cnatSessionTransPrivateAddr(7)

    |  +-- -R-- Integer   cnatSessionOrigPrivatePort(8)

    |  |        Range: 0..65535

    |  +-- -R-- Integer   cnatSessionTransPrivatePort(9)

    |  |        Range: 0..65535

    |  +-- -R-- IpAddr    cnatSessionOrigPublicAddr(10)

    |  +-- -R-- IpAddr    cnatSessionTransPublicAddr(11)

    |  +-- -R-- Integer   cnatSessionOrigPublicPort(12)

    |  |        Range: 0..65535

    |  +-- -R-- Integer   cnatSessionTransPublicPort(13)

    |  |        Range: 0..65535

Thanks

Mahavir

[Do rate helpful posts]

[piero.spinnato]

Hi Mahavir,

thanks a lot for your suggestion. Unfortunately it seems that my 7604 doesn't have the CISCO-IETF-NAT-MIB on board. On the linux-based system where I query my 7604 from, I issued:

     snmpwalk -v2c  -c   <7604 address> .1.3.6.1.4.1.9.10.77

and the answer was:

     iso.3.6.1.4.1.9.10.77 = No Such Object available on this agent at this OID

indeed, walking through .1.3.6.1.4.1.9.10, I see iso.3.6.1.4.1.9.10.65 followed by iso.3.6.1.4.1.9.10.91

I also checked on the Cisco iOS MIB locator <http://tools.cisco.com/ITDIT/MIBS/MainServlet> the image file loaded on my 7604, and CISCO-IETF-NAT-MIB is not listed in.

Moreover, selecting CISCO-IETF-NAT-MIB on the Search for MIB option, the page I get desn't list my platform family (7600-SUP720/MSFC3) among the available ones.

How can I make sure that CISCO-IETF-NAT-MIB is supported on my router? Could you help me on that? Please let me know what data about the 7604 you need.

Thanks a lot in advance, cheers

Piero

[Mahabir Prasad]

Hi Piero

You need to find suitable IOS for your platform on which CISCO-IETF-NAT-MIB is supported.

Please paste 'show version' to check this.

Thanks

Mahavir

[Do rate helpful posts]

[piero.spinnato]

Hi Mahavir,

here it is,

thanks a lot, looking forward to your reply!

Piero

[Mahabir Prasad · Accepted solution]

Hi Piero

I done some research on it and found that CISCO-IETF-NAT-MIB is not supported on any IOS based platform. You can find it documented here: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_q_and_a_item09186a00800e523b.shtml#gen-nat

There was an enhancement request CSCdr25202 but that is also closed now. So i couldnt find any plan as well for its implemention.

May be standard NAT RFC MIB will be implemented when it will be out.

Thanks

Mahavir

[Do rate helpful posts]

[piero.spinnato]

Hi Mahavir,

too bad I'll see how to do what I want differently. Thanks a lot for your help.

Cheers

Piero

[Mahabir Prasad]

Hi Peiro

From you post it looks like you are also looking for any snmp tool to achieve this.

If yes there are many free tools like net-snmp (CLI tool) and iReasioning MIB browser (GUI tool) and many others as well

Thanks

Mahavir