>> MIB - Management Information Base

>> Table: ipNatPresetOperTable - (.1.3.6.1.4.1.272.4.5.63.1)

Description: This table specifies the IP addresses and port numbers for sessions requested from outside. If this table is empty and NAT is enabled, only packets for sessions initiated from inside are forwarded. It's similar to the former defined ipNatPresetTable.

The IP address and the port number of the internal server can be specified individually for each combination of - protocol (udp/tcp/icmp) - initiating hosts IP address (RemoteAddr, RemoteMask) - destination address or network (ExtAddr, ExtMask) - destination port number or range (ExtPort, ExtPortRange)

Entries in the table are created: - either by the IP subsystem itself due to the administratively-defined ipNatPresetTable entries (ipNatPresetOperType_permanent(1)) - or by several subsystems whenever there is a need for such non-static NAT policies (ipNatPresetOperType_temporary(2))

Entries are deleted: - either by the IP subsystem itself due to the administratively-defined ipNatPresetTable entries (ipNatPresetOperType_permanent(1)) - or by several subsystems whenever there is a need for such non-static NAT policies (ipNatPresetOperType_temporary(2)) - or, in case of non-permanent entries, by the administrator.

ipNatPresetOperTable
OIDNameTypeAccess
.1IfIndexINTEGERR
.2ProtocolENUMD
.3RemoteAddrIpAddressR
.4RemoteMaskIpAddressR
.5ExtAddrIpAddressR
.6ExtMaskIpAddressR
.7ExtPortINTEGERR
.8ExtPortRangeINTEGERR
.9IntAddrIpAddressR
.10IntPortINTEGERR
.11IntMaskIpAddressR
.12TimeoutINTEGERR
.13TcpOptionBITSR
.14TypeENUMR
.15ParentINTEGERR

IfIndex
This object specifies the interface index, for which the table entry shall be valid. If set to 0, the entry will be valid for all interfaces configured to use NAT.
Protocol
This object specifies the protocol, for which the table entry shall be valid.

Enumerations:

  • icmp (1)
  • igmp (2)
  • ggp (3)
  • ip (4)
  • tcp (6)
  • egp (8)
  • igp (9)
  • pup (12)
  • chaos (16)
  • udp (17)
  • hmp (20)
  • xns-idp (22)
  • rdp (27)
  • ipv6 (41)
  • rsvp (46)
  • gre (47)
  • esp (50)
  • ah (51)
  • tlsp (56)
  • skip (57)
  • kryptolan (65)
  • iso-ip (80)
  • igrp (88)
  • ospf (89)
  • ipinip (94)
  • ipx-in-ip (111)
  • vrrp (112)
  • l2tp (115)
  • any (255)
  • delete (256)
RemoteAddr
This object specifies together with ipNatPrOperRemoteMask the the set of IP addresses of remote hosts initiating a session. The table entry will be valid for an incoming packet, when the IP adress of the remote host initiating the session lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any remote host.
RemoteMask
This object specifies together with ipNatPrOperRemoteAddr the set of IP addresses of remote hosts initiating the session. The table entry will be valid for an incoming packet, when the IP adress of the remote host initiating the session lies in the range specified by both objects. If both objects are set to 0.0.0.0, the table entry will be valid for any remote host.
ExtAddr
This object specifies together with ipNatPrOperExtMask the set of destination IP addresses, for which the table entry shall be valid. The entry is valid, if the target IP address of an incoming IP packet lies in the range specified by both objects.

If both objects are set to 0.0.0.0, the table entry will be valid for any IP address.

ExtMask
This object specifies together with ipNatPrOperExtAddr the set of destination IP addresses, for which the table entry shall be valid. The entry is valid, if the target IP address of an incoming packet lies in the range specified by both objects.

If both objects are set to 0.0.0.0, the table entry will be valid for any IP address.

ExtPort
This object specifies together with ipNatPrOperExtPortRange the range of portnumbers for incoming packets, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatPrOperPortRange is set to -1, the entry is only valid, when the destination portnumber of an incoming packet is equal to ipNatPrOperExtPort. Otherwise, the entry is valid, if the destination portnumber lies in the range ExtPort .. ExtPortRange.

Range: -1 to 65535

ExtPortRange
This object specifies together with ipNatPrOperExtPort the range of portnumbers for incoming packets, for which the table entry shall be valid. If both objects are set to -1, the entry is valid for all portnumbers. If ipNatPrOperPortRange is set to -1, the entry is only valid, when the destination portnumber of an incoming packet is equal to ipNatPrOperExtPort. Otherwise, the entry is valid, if the destination portnumber lies in the range ExtPort .. ExtPortRange.

Range: -1 to 65535

IntAddr
With ipNatPrOperIntMask, this object specifies the internal target host's IP address for incoming packets matching the table entry.

An incoming packet matching this entry will be routed to the internal server specified by this object and ipNatPrOperIntMask.

If this object is set to 0.0.0.0, the target host will be the original target host in the incoming packet. No translation of the IP-addresses takes place in this case.

If ipNatPrOperIntMask is set to 255.255.255.255, the internal server IP address is ipNatPrOperIntAddr.

If ipNatPrOperIntMask is a subnet mask, the internal server IP address is the incoming one in which the NET part is mapped according to 'ipNatPrOperIntAddr / ipNatPrOperIntMask'.

IntPort
This object specifies the internal target host's port-number for incoming packets matching the table entry. If this object is set to -1, the target portnumber will be taken from the original incoming packet. No translation of the portnumber will take place in this case. If the set of portnumbers for this table entry is a range instead of a single portnumber, this object will specify the base of the target range of portnumbers. The internal portnumber will be constructed as follows:

new-target-port := old-target-port - ipNatPrOperExtPort + ipNatPrOperIntPort

Range: -1 to 65535

IntMask
With ipNatPrOperIntAddr, this object specifies the internal target host's IP address for incoming packets matching the table entry.

An incoming packet matching this entry will be routed to the internal server specified by this object and ipNatPrOperIntMask.

If this object is set to 255.255.255.255, the internal server IP address is ipNatPrOperIntAddr.

If this object is a subnet mask, the internal server IP address is the incoming one in which the NET part is mapped according to 'ipNatPrOperIntAddr / ipNatPrOperIntMask'.

Timeout
When there is no traffic associated with a NAT entry, this entry is discarded at the end of a timeout value. This object holds this timeout value in seconds. If set to the default value of 0, the timeout will be set to the value specified either in ipExtIfNatTcpTimeout or ipExtIfNatOtherTimeout, depending on the protocol.

Range: 0 to 5184000

TcpOption
Additional selector, increases the prossible granularity of the TCP-related NAT preset rules. This parameter doesn't matter if not set, in all other cases initial TCP SYN messages without the associated TCP option will be ignored, possible settings: - pathFinder(0) proprietary NCP pathfinder option

Enumerations:

  • pathFinder (0)
Type
Specifies whether there is an associated ipNatPrestTable entry (permanent) or not (temporary). Note that entries with type permanent (1) cannot be deleted by the administrator directly.

Enumerations:

  • permanent (1)
  • temporary (2)
  • delete (3)
Parent
Row number of the associated ipNatPresetTable entry.


MIB Reference to Software Version 10.2.12 generated on 2023/08/29. Provided by webmaster@bintec-elmeg.com
Copyright ©2023 by bintec elmeg GmbH