PAT question

kyoung77 · ‎12-06-2007

on the CSS11506 is it possible tp disable pat on a selected range of source ports for TCP? I'm having an issue with a new version of Symantec backup software. The software appears to be expecting the source port to be translated when connectin to tcp server port 13724.

Also what's the impact if PATs turned of globally?

Thanks!

Diego Vargas · ‎12-06-2007

You can select the ports that the CSS will use when doing Port Mapping.

There is so much to say about this feature that I better give you this link that should clarify any doubts about this:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.10/configuration/content_lb/guide/Flow.html#wp1025398

Here is how to configure it:

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.10/configuration/content_lb/guide/Flow.html#wp998647

Hope it helps!!

Gilles Dufour · ‎12-06-2007

you can't disable pat for TCP.

This is because w/ multiple module you need to guarantee that the flow on the server side is also processed by the same module and this is done by playing with the src port (since the dst is always fixed).

Gilles.