Thank you. That was very helpful.

I have another question regarding the xlate entries and timeout. The xlate timeout is set to 3 hours which is the default. The xlate PAT entries go away once the connection gets closed. Does the xlate timeout apply only for Static NAT and Dynamic NAT entries?

thanks,

Hi

Glad to be of help.

Yes the PAT entries are removed once the connection gets closed. They have to be really because if they were subject to the same timeouts as the static translations then you would run out of PAT translations very quickly.

HTH

Jon

The link is no longer working

@frandolph you're replying to a 16 year old post. Please start a new discussion if you have a question and provide the details for your situation.

here is the new discussion

https://community.cisco.com/t5/discussions-de-s%C3%A9curit%C3%A9/how-to-send-xlate-entries-and-conn-table-to-syslog/m-p/4916275#M863