Diff: draft-ietf-behave-nat-mib-08.txt - draft-ietf-behave-nat-mib-09.txt

	draft-ietf-behave-nat-mib-08.txt	draft-ietf-behave-nat-mib-09.txt

	Network Working Group S. Perreault	Network Working Group S. Perreault
	Internet-Draft Viagenie	Internet-Draft Viagenie
	Obsoletes: 4008 (if approved) T. Tsou	Obsoletes: 4008 (if approved) T. Tsou
	Intended status: Standards Track Huawei Technologies (USA)	Intended status: Standards Track Huawei Technologies (USA)

	Expires: March 31, 2014 S. Sivakumar	Expires: April 20, 2014 S. Sivakumar
	Cisco Systems	Cisco Systems

	September 27, 2013	October 17, 2013

	Definitions of Managed Objects for Network Address Translators (NAT)	Definitions of Managed Objects for Network Address Translators (NAT)

	draft-ietf-behave-nat-mib-08	draft-ietf-behave-nat-mib-09

	Abstract	Abstract

	This memo defines a portion of the Management Information Base (MIB)	This memo defines a portion of the Management Information Base (MIB)
	for devices implementing Network Address Translator (NAT) function.	for devices implementing Network Address Translator (NAT) function.
	This MIB module may be used for monitoring of a device capable of NAT	This MIB module may be used for monitoring of a device capable of NAT
	function.	function.


		This document obsoletes RFC 4008.

	Status of This Memo	Status of This Memo

	This Internet-Draft is submitted in full conformance with the	This Internet-Draft is submitted in full conformance with the
	provisions of BCP 78 and BCP 79.	provisions of BCP 78 and BCP 79.

	Internet-Drafts are working documents of the Internet Engineering	Internet-Drafts are working documents of the Internet Engineering
	Task Force (IETF). Note that other groups may also distribute	Task Force (IETF). Note that other groups may also distribute
	working documents as Internet-Drafts. The list of current Internet-	working documents as Internet-Drafts. The list of current Internet-
	Drafts is at http://datatracker.ietf.org/drafts/current/.	Drafts is at http://datatracker.ietf.org/drafts/current/.

	Internet-Drafts are draft documents valid for a maximum of six months	Internet-Drafts are draft documents valid for a maximum of six months
	and may be updated, replaced, or obsoleted by other documents at any	and may be updated, replaced, or obsoleted by other documents at any
	time. It is inappropriate to use Internet-Drafts as reference	time. It is inappropriate to use Internet-Drafts as reference
	material or to cite them other than as "work in progress."	material or to cite them other than as "work in progress."


	This Internet-Draft will expire on March 31, 2014.	This Internet-Draft will expire on April 20, 2014.

	Copyright Notice	Copyright Notice

	Copyright (c) 2013 IETF Trust and the persons identified as the	Copyright (c) 2013 IETF Trust and the persons identified as the
	document authors. All rights reserved.	document authors. All rights reserved.

	This document is subject to BCP 78 and the IETF Trust's Legal	This document is subject to BCP 78 and the IETF Trust's Legal
	Provisions Relating to IETF Documents	Provisions Relating to IETF Documents
	(http://trustee.ietf.org/license-info) in effect on the date of	(http://trustee.ietf.org/license-info) in effect on the date of
	publication of this document. Please review these documents	publication of this document. Please review these documents

	skipping to change at page 2, line 16	skipping to change at page 2, line 18

	Table of Contents	Table of Contents

	1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2	1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
	2. The Internet-Standard Management Framework . . . . . . . . . 2	2. The Internet-Standard Management Framework . . . . . . . . . 2
	3. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 3	3. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 3
	3.1. Deprecated Features . . . . . . . . . . . . . . . . . . . 3	3.1. Deprecated Features . . . . . . . . . . . . . . . . . . . 3
	3.2. New Features . . . . . . . . . . . . . . . . . . . . . . 4	3.2. New Features . . . . . . . . . . . . . . . . . . . . . . 4
	3.3. Realms . . . . . . . . . . . . . . . . . . . . . . . . . 4	3.3. Realms . . . . . . . . . . . . . . . . . . . . . . . . . 4
	4. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 5	4. Definitions . . . . . . . . . . . . . . . . . . . . . . . . . 5

	5. Security Considerations . . . . . . . . . . . . . . . . . . . 77	5. Security Considerations . . . . . . . . . . . . . . . . . . . 82
	6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 80	6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 84
	7. References . . . . . . . . . . . . . . . . . . . . . . . . . 80	7. References . . . . . . . . . . . . . . . . . . . . . . . . . 84
	7.1. Normative References . . . . . . . . . . . . . . . . . . 80	7.1. Normative References . . . . . . . . . . . . . . . . . . 84
	7.2. Informative References . . . . . . . . . . . . . . . . . 81	7.2. Informative References . . . . . . . . . . . . . . . . . 86
	Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 82	Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 86

	1. Introduction	1. Introduction

	This memo defines a portion of the Management Information Base (MIB)	This memo defines a portion of the Management Information Base (MIB)
	for devices implementing NAT function. This MIB module may be used	for devices implementing NAT function. This MIB module may be used
	for monitoring of a device capable of NAT function. Using it for	for monitoring of a device capable of NAT function. Using it for
	configuration is deprecated. NAT types and their characteristics are	configuration is deprecated. NAT types and their characteristics are
	defined in [RFC2663]. Traditional NAT function, in particular is	defined in [RFC2663]. Traditional NAT function, in particular is
	defined in [RFC3022]. This MIB does not address the firewall	defined in [RFC3022]. This MIB does not address the firewall
	functions and must not be used for configuring or monitoring these.	functions and must not be used for configuring or monitoring these.
	Section 2 provides references to the SNMP management framework, which	Section 2 provides references to the SNMP management framework, which
	was used as the basis for the MIB module definition. Section 3	was used as the basis for the MIB module definition. Section 3
	provides an overview of the MIB features. Lastly, Section 4 has the	provides an overview of the MIB features. Lastly, Section 4 has the
	complete NAT MIB definition.	complete NAT MIB definition.

	The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",	The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",

	"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this	"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
	document are to be interpreted as described in [RFC2119].	"OPTIONAL" in this document are to be interpreted as described in
		[RFC2119].

	2. The Internet-Standard Management Framework	2. The Internet-Standard Management Framework

	For a detailed overview of the documents that describe the current	For a detailed overview of the documents that describe the current
	Internet-Standard Management Framework, please refer to section 7 of	Internet-Standard Management Framework, please refer to section 7 of
	RFC 3410 [RFC3410].	RFC 3410 [RFC3410].

	Managed objects are accessed via a virtual information store, termed	Managed objects are accessed via a virtual information store, termed
	the Management Information Base or MIB. MIB objects are generally	the Management Information Base or MIB. MIB objects are generally
	accessed through the Simple Network Management Protocol (SNMP).	accessed through the Simple Network Management Protocol (SNMP).

	skipping to change at page 5, line 49	skipping to change at page 6, line 4
	NOTIFICATION-TYPE	NOTIFICATION-TYPE
	FROM SNMPv2-SMI	FROM SNMPv2-SMI
	TEXTUAL-CONVENTION,	TEXTUAL-CONVENTION,
	StorageType,	StorageType,
	RowStatus	RowStatus
	FROM SNMPv2-TC	FROM SNMPv2-TC
	MODULE-COMPLIANCE,	MODULE-COMPLIANCE,
	NOTIFICATION-GROUP,	NOTIFICATION-GROUP,
	OBJECT-GROUP	OBJECT-GROUP
	FROM SNMPv2-CONF	FROM SNMPv2-CONF


	ifIndex,	ifIndex,
	ifCounterDiscontinuityGroup	ifCounterDiscontinuityGroup
	FROM IF-MIB	FROM IF-MIB
	SnmpAdminString	SnmpAdminString
	FROM SNMP-FRAMEWORK-MIB	FROM SNMP-FRAMEWORK-MIB
	InetAddressType,	InetAddressType,
	InetAddress,	InetAddress,

		InetAddressIPv4,
		InetAddressIPv6,
	InetAddressPrefixLength,	InetAddressPrefixLength,
	InetPortNumber	InetPortNumber

	FROM INET-ADDRESS-MIB;	FROM INET-ADDRESS-MIB
		MplsLabel
		FROM MPLS-TC-STD-MIB;

	natMIB MODULE-IDENTITY	natMIB MODULE-IDENTITY
	LAST-UPDATED "201304260000Z"	LAST-UPDATED "201304260000Z"
	-- RFC Ed.: set to publication date	-- RFC Ed.: set to publication date
	ORGANIZATION	ORGANIZATION
	"IETF Behavior Engineering for Hindrance Avoidance	"IETF Behavior Engineering for Hindrance Avoidance
	(BEHAVE) Working Group"	(BEHAVE) Working Group"
	CONTACT-INFO	CONTACT-INFO
	"Working Group Email: behave@ietf.org	"Working Group Email: behave@ietf.org


	skipping to change at page 56, line 4	skipping to change at page 56, line 15
	SYNTAX INTEGER {	SYNTAX INTEGER {
	endpointIndependent (0),	endpointIndependent (0),
	addressDependent (1),	addressDependent (1),
	addressAndPortDependent (2)	addressAndPortDependent (2)
	}	}

	NatPoolingType ::= TEXTUAL-CONVENTION	NatPoolingType ::= TEXTUAL-CONVENTION
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Pooling type as described in [RFC4787] sections 4.1."	"Pooling type as described in [RFC4787] sections 4.1."


	SYNTAX INTEGER {	SYNTAX INTEGER {
	arbitrary (0),	arbitrary (0),
	paired (1)	paired (1)
	}	}


		NatQuotaId ::= TEXTUAL-CONVENTION
		DISPLAY-HINT "d"
		STATUS current
		DESCRIPTION
		"A unique ID that is assigned to each quota."
		SYNTAX Unsigned32 (1..4294967295)

		GreKeyValue ::= TEXTUAL-CONVENTION
		DISPLAY-HINT "d"
		STATUS current
		DESCRIPTION
		"Denotes a GRE Key as defined in [RFC1701]."
		SYNTAX Unsigned32 (0..4294967295)

		IPv6FlowLabel ::= TEXTUAL-CONVENTION
		DISPLAY-HINT "d"
		STATUS current
		DESCRIPTION
		"Denotes an IPv6 Flow Label as defined in [RFC2460]."
		SYNTAX Unsigned32 (0..1048575)

		SubscriberIdentifierType ::= TEXTUAL-CONVENTION
		STATUS current
		DESCRIPTION
		"A value that represents a type of generalized subscriber
		access device identifier. Types 'gre(3)', 'mpls(4)', and
		'flow(5)' may be used as context identifiers for some
		deployments of Gateway Initiated DS-Lite [RFC6674].

		unknown(0) An unknown address type. This value MUST
		be used if the value of the corresponding
		SubscriberIdentifier object is a zero-length
		string. It may also be used to indicate an
		address that is not in one of the formats
		defined below.

		ipv4(1) An IPv4 address as defined by the
		InetAddressIPv4 textual convention.

		ipv6(2) An IPv6 address as defined by the
		InetAddressIPv6 textual convention.

		gre(3) A GRE key as defined by the GreKeyValue textual
		convention.

		mpls(4) An MPLS label as defined by the MplsLabel
		textual convention.

		flow(5) An IPv6 flow label as defined by the
		IPv6FlowLabel textual convention."

		SYNTAX INTEGER {
		unknown(0),
		ipv4(1),
		ipv6(2),
		gre(3),
		mpls(4),
		flow(5)
		}

		SubscriberIdentifier ::= TEXTUAL-CONVENTION
		STATUS current
		DESCRIPTION
		"Denotes a subscriber identifier.

		A SubscriberIdentifier value is always interpreted within
		the context of a SubscriberIdentifierType value. Every usage
		of the SubscriberIdentifier textual convention is required
		to specify the SubscriberIdentifierType object that provides
		the context. It is suggested that the
		SubscriberIdentifierType object be logically registered
		before the object(s) that use the SubscriberIdentifier
		textual convention, if they appear in the same logical row.

		The value of a SubscriberIdentifier object must always be
		consistent with the value of the associated
		SubscriberIdentifierType object. Attempts to set a
		SubscriberIdentifier object to a value inconsistent with the
		associated SubscriberIdentifierType must fail with an
		inconsistentValue error.

		When this textual convention is used as the syntax of an
		index object, there may be issues with the limit of 128
		sub-identifiers specified in SMIv2, STD 58. In this case,
		the object definition MUST include a 'SIZE' clause to limit
		the number of potential instance sub-identifiers; otherwise
		the applicable constraints MUST be stated in the appropriate
		conceptual row DESCRIPTION clauses, or in the surrounding
		documentation if there is no single DESCRIPTION clause that
		is appropriate."
		SYNTAX OCTET STRING (SIZE (0..255))

	-- notifications	-- notifications

	natNotifPoolWatermarkLow NOTIFICATION-TYPE	natNotifPoolWatermarkLow NOTIFICATION-TYPE
	OBJECTS { natPoolIndex }	OBJECTS { natPoolIndex }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"This notification is generated when the specified pool's	"This notification is generated when the specified pool's
	usage percentage becomes lower than or equal to the	usage percentage becomes lower than or equal to the
	specified threshold. The threshold is specified by the	specified threshold. The threshold is specified by the
	natPoolWatermarkLow object"	natPoolWatermarkLow object"

	skipping to change at page 57, line 4	skipping to change at page 59, line 10
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"This notification is generated when the number of active	"This notification is generated when the number of active
	address mappings exceeds the value of	address mappings exceeds the value of
	natAddrMapNotifyThreshold."	natAddrMapNotifyThreshold."
	::= { natMIBNotifications 5 }	::= { natMIBNotifications 5 }

	natNotifSubscriberMappings NOTIFICATION-TYPE	natNotifSubscriberMappings NOTIFICATION-TYPE
	OBJECTS { natSubscriberMappingCreations,	OBJECTS { natSubscriberMappingCreations,
	natSubscriberMappingRemovals }	natSubscriberMappingRemovals }


	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"This notification is generated when the number of active	"This notification is generated when the number of active
	mappings exceeds the value of natSubscriberMapNotifyThresh,	mappings exceeds the value of natSubscriberMapNotifyThresh,
	unless natSubscriberMapNotifyThresh is zero.."	unless natSubscriberMapNotifyThresh is zero.."
	::= { natMIBNotifications 6 }	::= { natMIBNotifications 6 }


		-- instance table

		natInstanceTable OBJECT-TYPE
		SYNTAX SEQUENCE OF NatInstanceEntry
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
		"Table of NAT instances.

		This table is a mechanism for allowing management of
		multiple NAT instances with a single SNMP agent. Note that
		SNMPv3 contexts MAY be used instead of or in addition to
		this mechanism."
		::= { natMIBObjects 11 }

		natInstanceEntry OBJECT-TYPE
		SYNTAX NatInstanceEntry
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
		"Objects related to a single NAT instance."
		INDEX { natInstanceIndex }
		::= { natInstanceTable 1 }

		NatInstanceEntry ::=
		SEQUENCE {
		natInstanceIndex Unsigned32
		}

		natInstanceIndex OBJECT-TYPE
		SYNTAX Unsigned32
		MAX-ACCESS read-only
		STATUS current
		DESCRIPTION
		"NAT instance index. Semantics of this number are
		implementation-specific."
		::= { natInstanceEntry 1 }

	-- counters	-- counters


	natCounters OBJECT IDENTIFIER ::= { natMIBObjects 11 }	natCounters OBJECT IDENTIFIER ::= { natInstanceIndex 0 }

	natTranslations OBJECT-TYPE	natTranslations OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"The number of packets translated."	"The number of packets translated."
	::= { natCounters 1 }	::= { natCounters 1 }

	natOutOfPortErrors OBJECT-TYPE	natOutOfPortErrors OBJECT-TYPE

	skipping to change at page 57, line 42	skipping to change at page 60, line 38

	natResourceErrors OBJECT-TYPE	natResourceErrors OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"The number of packets not translated because of resource	"The number of packets not translated because of resource
	constraints (excluding out-of-ports error and quota drops)."	constraints (excluding out-of-ports error and quota drops)."
	::= { natCounters 3 }	::= { natCounters 3 }


	natQuotaDrops OBJECT-TYPE
	SYNTAX Counter64
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
	"The number of incoming packets not translated because of
	quota limitations. Quotas include absolute limits as well
	as limits on rate of allocation."
	::= { natCounters 4 }

	natMappingCreations OBJECT-TYPE	natMappingCreations OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Number of mapping creations. This includes static mappings."	"Number of mapping creations. This includes static mappings."

	::= { natCounters 5 }	::= { natCounters 4 }

	natMappingRemovals OBJECT-TYPE	natMappingRemovals OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Number of mapping removals. This includes static mappings."	"Number of mapping removals. This includes static mappings."

	::= { natCounters 6 }	::= { natCounters 5 }

	natAddressMappingCreations OBJECT-TYPE	natAddressMappingCreations OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Number of address mapping creations. This includes static	"Number of address mapping creations. This includes static
	mappings."	mappings."

	::= { natCounters 7 }	::= { natCounters 6 }

	natAddressMappingRemovals OBJECT-TYPE	natAddressMappingRemovals OBJECT-TYPE
	SYNTAX Counter64	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Number of address mapping removals. This includes static	"Number of address mapping removals. This includes static
	mappings.	mappings.

	The number of active mappings is equal to	The number of active mappings is equal to
	natAddressMappingCreations - natAddressMappingRemovals."	natAddressMappingCreations - natAddressMappingRemovals."

	::= { natCounters 8 }	::= { natCounters 7 }

	natL4ProtocolTable OBJECT-TYPE	natL4ProtocolTable OBJECT-TYPE
	SYNTAX SEQUENCE OF NatPerProtocolEntry	SYNTAX SEQUENCE OF NatPerProtocolEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Table of protocols with per-protocol counters."	"Table of protocols with per-protocol counters."
	::= { natCounters 128 }	::= { natCounters 128 }

	natL4ProtocolEntry OBJECT-TYPE	natL4ProtocolEntry OBJECT-TYPE

	skipping to change at page 60, line 41	skipping to change at page 63, line 29
	DESCRIPTION	DESCRIPTION
	"Number of mapping removals. This includes static mappings.	"Number of mapping removals. This includes static mappings.

	The number of active mappings is equal to	The number of active mappings is equal to
	natL4ProtocolMappingCreations -	natL4ProtocolMappingCreations -
	natL4ProtocolMappingRemovals."	natL4ProtocolMappingRemovals."
	::= { natL4ProtocolEntry 7 }	::= { natL4ProtocolEntry 7 }

	-- limits	-- limits


	natLimits OBJECT IDENTIFIER ::= { natMIBObjects 12 }	natLimits OBJECT IDENTIFIER ::= { natInstanceIndex 1 }

	natLimitMappings OBJECT-TYPE	natLimitMappings OBJECT-TYPE
	SYNTAX Unsigned32	SYNTAX Unsigned32
	MAX-ACCESS read-write	MAX-ACCESS read-write
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Global limit on the total number of mappings. Zero means	"Global limit on the total number of mappings. Zero means
	unlimited."	unlimited."
	::= { natLimits 1 }	::= { natLimits 1 }


	skipping to change at page 62, line 5	skipping to change at page 64, line 41

	natLimitSubscribers OBJECT-TYPE	natLimitSubscribers OBJECT-TYPE
	SYNTAX Unsigned32	SYNTAX Unsigned32
	MAX-ACCESS read-write	MAX-ACCESS read-write
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Global limit on the number of subscribers with active	"Global limit on the number of subscribers with active
	mappings. Zero means unlimited."	mappings. Zero means unlimited."
	::= { natLimits 6 }	::= { natLimits 6 }


		-- quotas

		natQuotaObjects OBJECT IDENTIFIER ::= { natInstanceIndex 2 }

		natQuotaTable OBJECT-TYPE
		SYNTAX SEQUENCE OF NatQuotaEntry
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
		"Table of quotas applying to NAT. Quotas include absolute
		limits as well as limits on rate of allocation. Each quota
		in this table is identified by an index whose semantics are
		implementation-specific."
		::= { natQuotaObjects 1 }

		natQuotaEntry OBJECT-TYPE
		SYNTAX NatQuotaEntry
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
		"Entry in the table of quotas."
		INDEX { natQuotaIndex }
		::= { natQuotaTable 1 }

		NatQuotaEntry ::=
		SEQUENCE {
		natQuotaIndex NatQuotaId,
		natQuotaDrops Counter64
		}

		natQuotaIndex OBJECT-TYPE
		SYNTAX NatQuotaId
		MAX-ACCESS not-accessible
		STATUS current
		DESCRIPTION
		"Index of a quota."
		::= { natQuotaEntry 1 }

		natQuotaDrops OBJECT-TYPE
		SYNTAX Counter64
		MAX-ACCESS read-only
		STATUS current
		DESCRIPTION
		"The number of incoming packets not translated due to
		application of this quota."
		::= { natQuotaEntry 2 }

	-- pools	-- pools


	natPoolObjects OBJECT IDENTIFIER ::= { natMIBObjects 13 }	natPoolObjects OBJECT IDENTIFIER ::= { natInstanceIndex 3 }

	natPoolTable OBJECT-TYPE	natPoolTable OBJECT-TYPE
	SYNTAX SEQUENCE OF NatPoolEntry	SYNTAX SEQUENCE OF NatPoolEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Table of pools."	"Table of pools."


	::= { natPoolObjects 1 }	::= { natPoolObjects 1 }

	natPoolEntry OBJECT-TYPE	natPoolEntry OBJECT-TYPE
	SYNTAX NatPoolEntry	SYNTAX NatPoolEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Entry in the table of pools."	"Entry in the table of pools."
	INDEX { natPoolIndex }	INDEX { natPoolIndex }
	::= { natPoolTable 1 }	::= { natPoolTable 1 }

	skipping to change at page 62, line 30	skipping to change at page 66, line 20
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Entry in the table of pools."	"Entry in the table of pools."
	INDEX { natPoolIndex }	INDEX { natPoolIndex }
	::= { natPoolTable 1 }	::= { natPoolTable 1 }

	NatPoolEntry ::=	NatPoolEntry ::=
	SEQUENCE {	SEQUENCE {
	natPoolIndex NatPoolId,	natPoolIndex NatPoolId,
	natPoolRealm SnmpAdminString,	natPoolRealm SnmpAdminString,

	natPoolUsage Integer32,
	natPoolWatermarkLow Integer32,	natPoolWatermarkLow Integer32,
	natPoolWatermarkHigh Integer32,	natPoolWatermarkHigh Integer32,
	natPoolPortMin InetPortNumber,	natPoolPortMin InetPortNumber,
	natPoolPortMax InetPortNumber	natPoolPortMax InetPortNumber
	}	}

	natPoolIndex OBJECT-TYPE	natPoolIndex OBJECT-TYPE
	SYNTAX NatPoolId	SYNTAX NatPoolId
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current

	skipping to change at page 63, line 5	skipping to change at page 66, line 42
	::= { natPoolEntry 1 }	::= { natPoolEntry 1 }

	natPoolRealm OBJECT-TYPE	natPoolRealm OBJECT-TYPE
	SYNTAX SnmpAdminString (SIZE (0..32))	SYNTAX SnmpAdminString (SIZE (0..32))
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Realm to which this pool's addresses belong."	"Realm to which this pool's addresses belong."
	::= { natPoolEntry 2 }	::= { natPoolEntry 2 }


	natPoolUsage OBJECT-TYPE
	SYNTAX Integer32 (0..100)
	MAX-ACCESS read-only
	STATUS current
	DESCRIPTION
	"Percentage of the pool's total number of external ports
	currently mapped."
	::= { natPoolEntry 3 }

	natPoolWatermarkLow OBJECT-TYPE	natPoolWatermarkLow OBJECT-TYPE
	SYNTAX Integer32 (-1\|0..100)	SYNTAX Integer32 (-1\|0..100)
	MAX-ACCESS read-create	MAX-ACCESS read-create
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Low watermark on a pool's usage, in percentage of the total	"Low watermark on a pool's usage, in percentage of the total
	number of ports available. If set to -1, the watermark is	number of ports available. If set to -1, the watermark is

	disabled. Otherwise when natPoolUsage becomes lower than or	disabled. Otherwise when the usage percentage becomes lower
	equal to natPoolWatermarkLow, a notification is sent. The	than or equal to natPoolWatermarkLow, a notification is
	NAT may also start behaving in low usage mode (this is	sent. The NAT may also start behaving in low usage mode
	implementation-defined)."	(this is implementation-defined).
	::= { natPoolEntry 4 }
		The pool's current usage percentage can be computed by
		summing (natPoolRangeAllocations -
		natPoolRangeDeallocations) over all address ranges
		belonging to this pool, then dividing by the total number of
		IP addresses in this pool and by the size of the port range
		in this pool (natPoolPortMax - natPoolPortMin + 1)."
		::= { natPoolEntry 3 }

	natPoolWatermarkHigh OBJECT-TYPE	natPoolWatermarkHigh OBJECT-TYPE
	SYNTAX Integer32 (-1\|0..100)	SYNTAX Integer32 (-1\|0..100)
	MAX-ACCESS read-create	MAX-ACCESS read-create
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"High watermark on a pool's usage, in percentage of the total	"High watermark on a pool's usage, in percentage of the total
	number of ports available. If set to -1, the watermark is	number of ports available. If set to -1, the watermark is

	disabled. Otherwise, when natPoolUsage becomes higher than	disabled. Otherwise, when the usage percentage becomes
	or equal to natPoolWatermarkHigh, a notification is sent.	higher than or equal to natPoolWatermarkHigh, a notification
	The NAT may also start behaving in high usage mode (this is	is sent. The NAT may also start behaving in high usage mode
	implementation-defined)."	(this is implementation-defined)."
	::= { natPoolEntry 5 }	::= { natPoolEntry 4 }

	natPoolPortMin OBJECT-TYPE	natPoolPortMin OBJECT-TYPE
	SYNTAX InetPortNumber	SYNTAX InetPortNumber
	MAX-ACCESS read-create	MAX-ACCESS read-create
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Minimal port number to be allocated in this pool."	"Minimal port number to be allocated in this pool."

	::= { natPoolEntry 6 }	::= { natPoolEntry 5 }

	natPoolPortMax OBJECT-TYPE	natPoolPortMax OBJECT-TYPE
	SYNTAX InetPortNumber	SYNTAX InetPortNumber
	MAX-ACCESS read-create	MAX-ACCESS read-create
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Maximal port number to be allocated in this pool."	"Maximal port number to be allocated in this pool."

	::= { natPoolEntry 7 }	::= { natPoolEntry 6 }

	natPoolRangeTable OBJECT-TYPE	natPoolRangeTable OBJECT-TYPE
	SYNTAX SEQUENCE OF NatPoolRangeEntry	SYNTAX SEQUENCE OF NatPoolRangeEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"This table contains address ranges used by pool entries."	"This table contains address ranges used by pool entries."
	::= { natPoolObjects 2 }	::= { natPoolObjects 2 }

	natPoolRangeEntry OBJECT-TYPE	natPoolRangeEntry OBJECT-TYPE
	SYNTAX NatPoolRangeEntry	SYNTAX NatPoolRangeEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"NAT pool address range."	"NAT pool address range."

	INDEX { natPoolRangeType,	INDEX { natPoolRangePoolIndex }
	natPoolRangeBegin }
	::= { natPoolRangeTable 1 }	::= { natPoolRangeTable 1 }

	NatPoolRangeEntry ::=	NatPoolRangeEntry ::=
	SEQUENCE {	SEQUENCE {
	natPoolRangePoolIndex NatPoolId,	natPoolRangePoolIndex NatPoolId,
	natPoolRangeType InetAddressType,	natPoolRangeType InetAddressType,
	natPoolRangeBegin InetAddress,	natPoolRangeBegin InetAddress,
	natPoolRangeEnd InetAddress,	natPoolRangeEnd InetAddress,

	natPoolRangeAllocatedPorts Gauge32	natPoolRangeAllocations Counter64,
		natPoolRangeDeallocations Counter64
	}	}

	natPoolRangePoolIndex OBJECT-TYPE	natPoolRangePoolIndex OBJECT-TYPE
	SYNTAX NatPoolId	SYNTAX NatPoolId

	MAX-ACCESS read-only	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Index of the address pool to which this address range	"Index of the address pool to which this address range
	belongs. See natPoolIndex."	belongs. See natPoolIndex."
	::= { natPoolRangeEntry 1 }	::= { natPoolRangeEntry 1 }

	natPoolRangeType OBJECT-TYPE	natPoolRangeType OBJECT-TYPE
	SYNTAX InetAddressType	SYNTAX InetAddressType

	MAX-ACCESS not-accessible	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"The address type of natPoolRangeBegin and	"The address type of natPoolRangeBegin and
	natPoolRangeEnd."	natPoolRangeEnd."
	::= { natPoolRangeEntry 2 }	::= { natPoolRangeEntry 2 }

	natPoolRangeBegin OBJECT-TYPE	natPoolRangeBegin OBJECT-TYPE

	SYNTAX InetAddress (SIZE (4\|16))	SYNTAX InetAddress
	MAX-ACCESS not-accessible	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Lowest address included in this range."	"Lowest address included in this range."
	::= { natPoolRangeEntry 3 }	::= { natPoolRangeEntry 3 }

	natPoolRangeEnd OBJECT-TYPE	natPoolRangeEnd OBJECT-TYPE

	SYNTAX InetAddress (SIZE (4\|16))	SYNTAX InetAddress
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Highest address included in this range."	"Highest address included in this range."
	::= { natPoolRangeEntry 4 }	::= { natPoolRangeEntry 4 }


	natPoolRangeAllocatedPorts OBJECT-TYPE	natPoolRangeAllocations OBJECT-TYPE
	SYNTAX Gauge32	SYNTAX Counter64
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION

	"Number of ports currently allocated on the addresses in this	"Number of ports that have been allocated on the addresses in
	range."	this range."
	::= { natPoolRangeEntry 5 }	::= { natPoolRangeEntry 5 }


		natPoolRangeDeallocations OBJECT-TYPE
		SYNTAX Counter64
		MAX-ACCESS read-only
		STATUS current
		DESCRIPTION
		"Number of ports that have been allocated and then
		deallocated on the addresses in this range.

		The number of ports currently allocated on the addresses in
		this range can be computed by subtracting
		natPoolRangeDeallocations from natPoolRangeAllocations."
		::= { natPoolRangeEntry 6 }

	-- indexed mapping tables	-- indexed mapping tables


	natMapObjects OBJECT IDENTIFIER ::= { natMIBObjects 14 }	natMapObjects OBJECT IDENTIFIER ::= { natInstanceIndex 4 }

	natMapIntAddrTable OBJECT-TYPE	natMapIntAddrTable OBJECT-TYPE
	SYNTAX SEQUENCE OF NatMapIntAddrEntry	SYNTAX SEQUENCE OF NatMapIntAddrEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Table of mappings from internal to external address.	"Table of mappings from internal to external address.

	This table is only applicable to NATs that have an 'IP	This table is only applicable to NATs that have an 'IP
	address pooling' behavior of 'Paired' [RFC4787]."	address pooling' behavior of 'Paired' [RFC4787]."

	skipping to change at page 70, line 26	skipping to change at page 74, line 26
	SYNTAX NatPoolingType	SYNTAX NatPoolingType
	MAX-ACCESS read-only	MAX-ACCESS read-only
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Type of address pooling behavior that was used to create	"Type of address pooling behavior that was used to create
	this mapping."	this mapping."
	::= { natMappingTableEntry 13 }	::= { natMappingTableEntry 13 }

	-- subscribers	-- subscribers


	natSubscribers OBJECT IDENTIFIER ::= { natMIBObjects 15 }	natSubscribers OBJECT IDENTIFIER ::= { natInstanceIndex 5 }

	natSubscribersTable OBJECT-TYPE	natSubscribersTable OBJECT-TYPE
	SYNTAX SEQUENCE OF NatSubscribersTableEntry	SYNTAX SEQUENCE OF NatSubscribersTableEntry
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Table of CGN subscribers."	"Table of CGN subscribers."
	::= { natSubscribers 1 }	::= { natSubscribers 1 }

	natSubscribersTableEntry OBJECT-TYPE	natSubscribersTableEntry OBJECT-TYPE

	skipping to change at page 70, line 48	skipping to change at page 74, line 48
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Each entry describes a single CGN subscriber."	"Each entry describes a single CGN subscriber."
	INDEX { natSubscriberIdentifierType,	INDEX { natSubscriberIdentifierType,
	natSubscriberIdentifier }	natSubscriberIdentifier }
	::= { natSubscribersTable 1 }	::= { natSubscribersTable 1 }

	NatSubscribersTableEntry ::=	NatSubscribersTableEntry ::=
	SEQUENCE {	SEQUENCE {

	natSubscriberIdentifierType InetAddressType,	natSubscriberIdentifierType SubscriberIdentifierType,
	natSubscriberIdentifier InetAddress,	natSubscriberIdentifier SubscriberIdentifier,
	natSubscriberIntPrefixType InetAddressType,	natSubscriberIntPrefixType InetAddressType,
	natSubscriberIntPrefix InetAddress,	natSubscriberIntPrefix InetAddress,
	natSubscriberIntPrefixLength InetAddressPrefixLength,	natSubscriberIntPrefixLength InetAddressPrefixLength,
	natSubscriberRealm SnmpAdminString,	natSubscriberRealm SnmpAdminString,
	natSubscriberPool Unsigned32,	natSubscriberPool Unsigned32,
	natSubscriberTranslations Counter64,	natSubscriberTranslations Counter64,
	natSubscriberOutOfPortErrors Counter64,	natSubscriberOutOfPortErrors Counter64,
	natSubscriberResourceErrors Counter64,	natSubscriberResourceErrors Counter64,
	natSubscriberQuotaDrops Counter64,	natSubscriberQuotaDrops Counter64,
	natSubscriberMappingCreations Counter64,	natSubscriberMappingCreations Counter64,
	natSubscriberMappingRemovals Counter64,	natSubscriberMappingRemovals Counter64,
	natSubscriberLimitMappings Unsigned32,	natSubscriberLimitMappings Unsigned32,
	natSubscriberMapNotifyThresh Unsigned32	natSubscriberMapNotifyThresh Unsigned32
	}	}

	natSubscriberIdentifierType OBJECT-TYPE	natSubscriberIdentifierType OBJECT-TYPE

	SYNTAX InetAddressType	SYNTAX SubscriberIdentifierType
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Address type of the subscriber identifier."	"Address type of the subscriber identifier."
	::= { natSubscribersTableEntry 1 }	::= { natSubscribersTableEntry 1 }

	natSubscriberIdentifier OBJECT-TYPE	natSubscriberIdentifier OBJECT-TYPE

	SYNTAX InetAddress (SIZE (4\|16))	SYNTAX SubscriberIdentifier (SIZE (3\|4\|16))
	MAX-ACCESS not-accessible	MAX-ACCESS not-accessible
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Address used for uniquely identifying the subscriber.	"Address used for uniquely identifying the subscriber.

	In traditional NAT, this is the internal address assigned to	In traditional NAT, this is the internal address assigned to
	the CPE. In case an address range is assigned to a	the CPE. In case an address range is assigned to a
	subscriber, the first address in the range is used as	subscriber, the first address in the range is used as
	identifier. For tunnelled connectivity (e.g., DS-Lite	identifier. For tunnelled connectivity (e.g., DS-Lite
	[RFC6333]), the outer address is used as identifier (i.e.,	[RFC6333]), the outer address is used as identifier (i.e.,

	skipping to change at page 74, line 15	skipping to change at page 78, line 15
	natSubscriberMapNotifyThresh OBJECT-TYPE	natSubscriberMapNotifyThresh OBJECT-TYPE
	SYNTAX Unsigned32	SYNTAX Unsigned32
	MAX-ACCESS read-write	MAX-ACCESS read-write
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"See natNotifSubscriberMappings."	"See natNotifSubscriberMappings."
	::= { natSubscribersTableEntry 15 }	::= { natSubscribersTableEntry 15 }

	-- object groups	-- object groups


	natGroupBasicObjects OBJECT-GROUP	natGroupStatelessObjects OBJECT-GROUP
	OBJECTS { natTranslations,	OBJECTS { natInstanceIndex,
	natOutOfPortErrors,	natTranslations,
	natResourceErrors,	natResourceErrors,
	natQuotaDrops,	natQuotaDrops,
	natMappingCreations,	natMappingCreations,
	natMappingRemovals,	natMappingRemovals,
	natL4ProtocolTranslations ,	natL4ProtocolTranslations ,

	natL4ProtocolOutOfPortErrors,
	natL4ProtocolResourceErrors,	natL4ProtocolResourceErrors,
	natL4ProtocolQuotaDrops,	natL4ProtocolQuotaDrops,
	natL4ProtocolMappingCreations,	natL4ProtocolMappingCreations,
	natL4ProtocolMappingRemovals,	natL4ProtocolMappingRemovals,

		natMappingIntRealm,
		natMappingIntAddressType,
		natMappingIntAddress,
		natMappingIntPort,
		natMappingPool,
		natMappingMapBehavior,
		natMappingFilterBehavior }
		STATUS current
		DESCRIPTION
		"Basic counters, limits, and thresholds that do not require
		stateful NAT. That is, they apply to both stateless and
		stateful NATs.

		For this MIB's purposes, stateless NATs are defined as NATs
		that do not create mappings dynamically (either implicitly
		or explicitly using, for instance, the Port Control
		Protocol). Their mappings are created statically by the NAT
		administrator."
		::= { natMIBGroups 7 }

		natGroupStatefulObjects OBJECT-GROUP
		OBJECTS { natOutOfPortErrors,
		natL4ProtocolOutOfPortErrors,
	natLimitMappings,	natLimitMappings,
	natMappingsNotifyThreshold,	natMappingsNotifyThreshold,
	natPoolIndex,	natPoolIndex,
	natPoolRealm,	natPoolRealm,

	natPoolUsage,
	natPoolWatermarkLow,	natPoolWatermarkLow,
	natPoolWatermarkHigh,	natPoolWatermarkHigh,
	natPoolPortMin,	natPoolPortMin,
	natPoolPortMax,	natPoolPortMax,

	natPoolRangePoolIndex,	natPoolRangeType,
		natPoolRangeBegin,
	natPoolRangeEnd,	natPoolRangeEnd,

	natPoolRangeAllocatedPorts,	natPoolRangeAllocations,
	natMappingIntRealm,	natPoolRangeDeallocations,
	natMappingIntAddressType,
	natMappingIntAddress,
	natMappingIntPort,
	natMappingPool,
	natMappingMapBehavior,
	natMappingFilterBehavior,
	natMappingAddressPooling }	natMappingAddressPooling }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION

	"Basic counters, limits, and thresholds."	"Basic counters, limits, and thresholds that require stateful
	::= { natMIBGroups 7 }	NAT."
		::= { natMIBGroups 8 }

	natGroupAddrMapObjects OBJECT-GROUP	natGroupAddrMapObjects OBJECT-GROUP
	OBJECTS { natAddressMappingCreations,	OBJECTS { natAddressMappingCreations,
	natAddressMappingRemovals,	natAddressMappingRemovals,
	natLimitAddressMappings,	natLimitAddressMappings,
	natAddrMapNotifyThreshold,	natAddrMapNotifyThreshold,
	natMapIntAddrExtRealm,	natMapIntAddrExtRealm,
	natMapIntAddrExt }	natMapIntAddrExt }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Objects that require 'Paired IP address pooling' behavior	"Objects that require 'Paired IP address pooling' behavior
	[RFC4787]."	[RFC4787]."

	::= { natMIBGroups 8 }	::= { natMIBGroups 9 }

	natGroupFragmentObjects OBJECT-GROUP	natGroupFragmentObjects OBJECT-GROUP
	OBJECTS { natLimitFragments }	OBJECTS { natLimitFragments }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Objects that require 'Receive Fragments Out of Order'	"Objects that require 'Receive Fragments Out of Order'
	behavior [RFC4787]."	behavior [RFC4787]."

	::= { natMIBGroups 9 }	::= { natMIBGroups 10 }

	natGroupBasicNotifications NOTIFICATION-GROUP	natGroupBasicNotifications NOTIFICATION-GROUP
	NOTIFICATIONS { natNotifPoolWatermarkLow,	NOTIFICATIONS { natNotifPoolWatermarkLow,
	natNotifPoolWatermarkHigh,	natNotifPoolWatermarkHigh,
	natNotifMappings }	natNotifMappings }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Basic notifications."	"Basic notifications."
	::= { natMIBGroups 11 }	::= { natMIBGroups 11 }


	skipping to change at page 76, line 22	skipping to change at page 80, line 41

	natGroupSubscriberNotifications NOTIFICATION-GROUP	natGroupSubscriberNotifications NOTIFICATION-GROUP
	NOTIFICATIONS { natNotifSubscriberMappings }	NOTIFICATIONS { natNotifSubscriberMappings }
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"Subscriber notifications."	"Subscriber notifications."
	::= { natMIBGroups 14 }	::= { natMIBGroups 14 }

	-- compliance statements	-- compliance statements


	natBasicCompliance MODULE-COMPLIANCE	natBasicStatelessCompliance MODULE-COMPLIANCE
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION

	"Basic compliance with this MIB is attained when the objects	"Basic stateless compliance with this MIB is attained when
	contained in the mandatory groups are implemented."	the objects contained in the mandatory groups are
		implemented."
	MODULE -- this module	MODULE -- this module

	MANDATORY-GROUPS { natGroupBasicObjects,	MANDATORY-GROUPS { natGroupStatelessObjects }
	natGroupBasicNotifications }
	::= { natMIBCompliances 3 }	::= { natMIBCompliances 3 }


		natBasicStatefulCompliance MODULE-COMPLIANCE
		STATUS current
		DESCRIPTION
		"Basic stateful compliance with this MIB is attained when the
		objects contained in the mandatory groups are implemented."
		MODULE -- this module
		MANDATORY-GROUPS { natGroupStatelessObjects,
		natGroupStatefulObjects,
		natGroupBasicNotifications }
		::= { natMIBCompliances 4 }

	natAddrMapCompliance MODULE-COMPLIANCE	natAddrMapCompliance MODULE-COMPLIANCE
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"NATs that have 'Paired IP address pooling' behavior	"NATs that have 'Paired IP address pooling' behavior
	[RFC4787] and implement the objects in this group can claim	[RFC4787] and implement the objects in this group can claim
	this level of compliance."	this level of compliance."
	MODULE -- this module	MODULE -- this module

	MANDATORY-GROUPS { natGroupBasicObjects,	MANDATORY-GROUPS { natGroupStatelessObjects,
		natGroupStatefulObjects,
	natGroupBasicNotifications,	natGroupBasicNotifications,
	natGroupAddrMapObjects,	natGroupAddrMapObjects,
	natGroupAddrMapNotifications }	natGroupAddrMapNotifications }

	::= { natMIBCompliances 4 }	::= { natMIBCompliances 5 }

	natFragmentsCompliance MODULE-COMPLIANCE	natFragmentsCompliance MODULE-COMPLIANCE
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"NATs that have 'Receive Fragments Out of Order' behavior	"NATs that have 'Receive Fragments Out of Order' behavior
	[RFC4787] and implement the objects in this group can claim	[RFC4787] and implement the objects in this group can claim
	this level of compliance."	this level of compliance."


	MODULE -- this module	MODULE -- this module

	MANDATORY-GROUPS { natGroupBasicObjects,	MANDATORY-GROUPS { natGroupStatelessObjects,
		natGroupStatefulObjects,
	natGroupBasicNotifications,	natGroupBasicNotifications,
	natGroupFragmentObjects }	natGroupFragmentObjects }

	::= { natMIBCompliances 5 }	::= { natMIBCompliances 6 }

	natCGNCompliance MODULE-COMPLIANCE	natCGNCompliance MODULE-COMPLIANCE
	STATUS current	STATUS current
	DESCRIPTION	DESCRIPTION
	"NATs that have 'Paired IP address pooling' and 'Receive	"NATs that have 'Paired IP address pooling' and 'Receive
	Fragments Out of Order' behavior [RFC4787] and implement the	Fragments Out of Order' behavior [RFC4787] and implement the
	objects in this group can claim this level of compliance.	objects in this group can claim this level of compliance.

	This level of compliance is to be expected of a CGN	This level of compliance is to be expected of a CGN
	compliant with [RFC6888]."	compliant with [RFC6888]."
	MODULE -- this module	MODULE -- this module

	MANDATORY-GROUPS { natGroupBasicObjects,	MANDATORY-GROUPS { natGroupStatelessObjects,
		natGroupStatefulObjects,
	natGroupBasicNotifications,	natGroupBasicNotifications,
	natGroupAddrMapObjects,	natGroupAddrMapObjects,
	natGroupAddrMapNotifications,	natGroupAddrMapNotifications,
	natGroupFragmentObjects,	natGroupFragmentObjects,
	natGroupSubscriberObjects,	natGroupSubscriberObjects,
	natGroupSubscriberNotifications }	natGroupSubscriberNotifications }

	::= { natMIBCompliances 6 }	::= { natMIBCompliances 7 }

	END	END

	5. Security Considerations	5. Security Considerations

	There are a number of management objects defined in this MIB module	There are a number of management objects defined in this MIB module
	with a MAX-ACCESS clause of read-write and/or read-create. Such	with a MAX-ACCESS clause of read-write and/or read-create. Such
	objects may be considered sensitive or vulnerable in some network	objects may be considered sensitive or vulnerable in some network
	environments. The support for SET operations in a non-secure	environments. The support for SET operations in a non-secure
	environment without proper protection can have a negative effect on	environment without proper protection can have a negative effect on

	skipping to change at page 80, line 25	skipping to change at page 84, line 50
	IANA has assigned object identifier 123 to the natMIB module, with	IANA has assigned object identifier 123 to the natMIB module, with
	prefix iso.org.dod.internet.mgmt.mib-2 in the Network Management	prefix iso.org.dod.internet.mgmt.mib-2 in the Network Management
	Parameters registry [SMI-NUMBERS].	Parameters registry [SMI-NUMBERS].

	No IANA actions are required by this document.	No IANA actions are required by this document.

	7. References	7. References

	7.1. Normative References	7.1. Normative References


		[RFC1701] Hanks, S., Li, T., Farinacci, D., and P. Traina, "Generic
		Routing Encapsulation (GRE)", RFC 1701, October 1994.

	[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate	[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
	Requirement Levels", BCP 14, RFC 2119, March 1997.	Requirement Levels", BCP 14, RFC 2119, March 1997.


		[RFC2460] Deering, S. and R. Hinden, "Internet Protocol, Version 6
		(IPv6) Specification", RFC 2460, December 1998.

	[RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J.	[RFC2578] McCloghrie, K., Ed., Perkins, D., Ed., and J.
	Schoenwaelder, Ed., "Structure of Management Information	Schoenwaelder, Ed., "Structure of Management Information
	Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.	Version 2 (SMIv2)", STD 58, RFC 2578, April 1999.

	[RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J.	[RFC2579] McCloghrie, K., Ed., Perkins, D., Ed., and J.
	Schoenwaelder, Ed., "Textual Conventions for SMIv2", STD	Schoenwaelder, Ed., "Textual Conventions for SMIv2", STD
	58, RFC 2579, April 1999.	58, RFC 2579, April 1999.

	[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder,	[RFC2580] McCloghrie, K., Perkins, D., and J. Schoenwaelder,
	"Conformance Statements for SMIv2", STD 58, RFC 2580,	"Conformance Statements for SMIv2", STD 58, RFC 2580,

	skipping to change at page 81, line 47	skipping to change at page 86, line 31
	Standard Management Framework", RFC 3410, December 2002.	Standard Management Framework", RFC 3410, December 2002.

	[RFC4008] Rohit, R., Srisuresh, P., Raghunarayan, R., Pai, N., and	[RFC4008] Rohit, R., Srisuresh, P., Raghunarayan, R., Pai, N., and
	C. Wang, "Definitions of Managed Objects for Network	C. Wang, "Definitions of Managed Objects for Network
	Address Translators (NAT)", RFC 4008, March 2005.	Address Translators (NAT)", RFC 4008, March 2005.

	[RFC6333] Durand, A., Droms, R., Woodyatt, J., and Y. Lee, "Dual-	[RFC6333] Durand, A., Droms, R., Woodyatt, J., and Y. Lee, "Dual-
	Stack Lite Broadband Deployments Following IPv4	Stack Lite Broadband Deployments Following IPv4
	Exhaustion", RFC 6333, August 2011.	Exhaustion", RFC 6333, August 2011.


		[RFC6674] Brockners, F., Gundavelli, S., Speicher, S., and D. Ward,
		"Gateway-Initiated Dual-Stack Lite Deployment", RFC 6674,
		July 2012.

	[RFC6888] Perreault, S., Yamagata, I., Miyakawa, S., Nakagawa, A.,	[RFC6888] Perreault, S., Yamagata, I., Miyakawa, S., Nakagawa, A.,
	and H. Ashida, "Common Requirements for Carrier-Grade NATs	and H. Ashida, "Common Requirements for Carrier-Grade NATs
	(CGNs)", BCP 127, RFC 6888, April 2013.	(CGNs)", BCP 127, RFC 6888, April 2013.

	[SMI-NUMBERS]	[SMI-NUMBERS]
	, "Network Management Parameters registry at IANA", ,	, "Network Management Parameters registry at IANA", ,
	<http://www.iana.org/assignments/smi-numbers>.	<http://www.iana.org/assignments/smi-numbers>.

	Authors' Addresses	Authors' Addresses


	Simon Perreault	Simon Perreault
	Viagenie	Viagenie
	246 Aberdeen	246 Aberdeen
	Quebec, QC G1R 2E1	Quebec, QC G1R 2E1
	Canada	Canada

	Phone: +1 418 656 9254	Phone: +1 418 656 9254
	Email: simon.perreault@viagenie.ca	Email: simon.perreault@viagenie.ca
	URI: http://viagenie.ca	URI: http://viagenie.ca


End of changes. 68 change blocks.
	103 lines changed or deleted	326 lines changed or added
This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/