Can I limit the maximum nat entries per address (PAT enviroment)?

[jorge_sanzdeacedo]

Enviroment:

7206 VXR with 12.2(3)

PAT with many address, one address per user

I would like to limit the maximum entries in the NAT address-translation -table per user. I already know that I can limit the total maximum entries in the global NAT table, but I need to limit basing on user.

Does Anyone know how I can implement this feature?

[raymong]

There is no feature currently available that will limit the maximum number of translations a user can create. You can however limit when a user will translate. For example:

ip nat inside source route-map NAT pool test overload

!

route-map NAT permit 10

match ip address 101

!

access-list 101 deny ip host 10.1.1.1 192.168.1.0 0.0.0.255

access-list 101 permit ip host 10.1.1.1 any