09-19-2013 10:08 AM
Hi,
I have a 7602 from which I need to get a list of the IP addresses defined as 1-to-1 NAT static translation targets. Namely, those defined by ip nat inside source static.
Probably SNMP could help, but how can I do that?
Any suggestion is very welcome.
Thanks in advance, cheers
Piero
Solved! Go to Solution.
09-23-2013 08:42 AM
Hi Piero
I done some research on it and found that CISCO-IETF-NAT-MIB is not supported on any IOS based platform. You can find it documented here: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_q_and_a_item09186a00800e523b.shtml#gen-nat
There was an enhancement request CSCdr25202 but that is also closed now. So i couldnt find any plan as well for its implemention.
May be standard NAT RFC MIB will be implemented when it will be out.
Thanks
Mahavir
[Do rate helpful posts]
09-19-2013 11:05 AM
Hi Peiro
You can use CISCO-IETF-NAT-MIB for this purpose as shown below.
.1.3.6.1.4.1.9.10.77.1.2 +--cnatSessionTable(5) detail | +--cnatSessionEntry(1) detail | | | +-- ---- UInteger cnatSessionBindId(1) | +-- ---- UInteger cnatSessionId(2) | +-- -R-- EnumVal cnatSessionDirection(3) | | Values: inbound(1), outbound(2) | +-- -R-- Timeticks cnatSessionUpTime(4) | +-- -R-- EnumVal cnatSessionProtocolType(5) | | Textual Convention: NATProtocolType | | Values: other(1), icmp(2), udp(3), tcp(4) | +-- -R-- IpAddr cnatSessionOrigPrivateAddr(6) | +-- -R-- IpAddr cnatSessionTransPrivateAddr(7) | +-- -R-- Integer cnatSessionOrigPrivatePort(8) | | Range: 0..65535 | +-- -R-- Integer cnatSessionTransPrivatePort(9) | | Range: 0..65535 | +-- -R-- IpAddr cnatSessionOrigPublicAddr(10) | +-- -R-- IpAddr cnatSessionTransPublicAddr(11) | +-- -R-- Integer cnatSessionOrigPublicPort(12) | | Range: 0..65535 | +-- -R-- Integer cnatSessionTransPublicPort(13) | | Range: 0..65535
Thanks
Mahavir
[Do rate helpful posts]
09-23-2013 05:07 AM
Hi Mahavir,
thanks a lot for your suggestion. Unfortunately it seems that my 7604 doesn't have the CISCO-IETF-NAT-MIB on board. On the linux-based system where I query my 7604 from, I issued:
snmpwalk -v2c -c
and the answer was:
iso.3.6.1.4.1.9.10.77 = No Such Object available on this agent at this OID
indeed, walking through .1.3.6.1.4.1.9.10, I see iso.3.6.1.4.1.9.10.65 followed by iso.3.6.1.4.1.9.10.91
I also checked on the Cisco iOS MIB locator <http://tools.cisco.com/ITDIT/MIBS/MainServlet> the image file loaded on my 7604, and CISCO-IETF-NAT-MIB is not listed in.
Moreover, selecting CISCO-IETF-NAT-MIB on the Search for MIB option, the page I get desn't list my platform family (7600-SUP720/MSFC3) among the available ones.
How can I make sure that CISCO-IETF-NAT-MIB is supported on my router? Could you help me on that? Please let me know what data about the 7604 you need.
Thanks a lot in advance, cheers
Piero
09-23-2013 05:30 AM
Hi Piero
You need to find suitable IOS for your platform on which CISCO-IETF-NAT-MIB is supported.
Please paste 'show version' to check this.
Thanks
Mahavir
[Do rate helpful posts]
09-23-2013 06:15 AM
09-23-2013 08:42 AM
Hi Piero
I done some research on it and found that CISCO-IETF-NAT-MIB is not supported on any IOS based platform. You can find it documented here: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_q_and_a_item09186a00800e523b.shtml#gen-nat
There was an enhancement request CSCdr25202 but that is also closed now. So i couldnt find any plan as well for its implemention.
May be standard NAT RFC MIB will be implemented when it will be out.
Thanks
Mahavir
[Do rate helpful posts]
09-23-2013 09:10 AM
Hi Mahavir,
too bad I'll see how to do what I want differently. Thanks a lot for your help.
Cheers
Piero
09-19-2013 11:11 AM
Hi Peiro
From you post it looks like you are also looking for any snmp tool to achieve this.
If yes there are many free tools like net-snmp (CLI tool) and iReasioning MIB browser (GUI tool) and many others as well
Thanks
Mahavir
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide