Querying Cisco ASA 5520 NAT tables via SNMP

[cjfred]

I need to determine, programmatically and in real time, the dynamically assigned global IP address that corresponds to an arbitrary local IP address. To accomplish this, I could write a utility that parses the ASA's syslog output file on the logging server, extracts any "Built translation" and "Removed translation" log entries, and uses the information to update an external database, which any interested and authorized programs could then query by local address to find its currently mapped global address. However, that seems like unnecessary work, when I should be able to get the answer directly from the ASA via SNMP.

My question is, does the ASA 5520 software support that portion of the MIB tree, and if so, where would I find it? It seems that OID 1.3.6.1.4.1.9.10.77 (CISCO-IETF-NAT-MIB) would be the right place, but the ASA doesn't seem to support anything under the 1.3.6.1.4.1.9.10 subtree. If it isn't supported at all in version 7.x of the ASA software, would upgrading the ASA to software version 8.x add the capability?

Thanks in advance for any assistance.

 

[brianinms]

I seriously doubt it as that's a pretty uncommon request. I would recommend using the program language Expect and then write a
script to parse the output.