Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

NAT in ASR1K

Hi All,

I am using ASR1004 for address translation for my subscriber. I have a problem that nat translation session is already a half (1 million) of what ASR1K ESP20 limitation (2 million session). Below is the output of "show ip nat statistics":

Total active translations: 1066570 (31 static, 1066539 dynamic; 1066506 extended)

Outside interfaces:TenGigabitEthernet0/1/0

Inside interfaces:

TenGigabitEthernet0/0/0.200, TenGigabitEthernet0/0/0.300

Hits: 716003894051  Misses: 10196539490

CEF Translated packets: 0, CEF Punted packets: 0

Expired translations: 10430579015

Dynamic mappings:

-- Inside Source

[Id: 7] route-map NATuser pool New-Pool refcount 1066163

pool New-Pool: netmask 255.255.224.0

start 139.255.128.1 end 139.255.159.254

type generic, total addresses 8190, allocated 2516 (30%), misses 0

nat-limit statistics:

max entry: max allowed 10000000, used 1066539, missed 0

Pool stats drop: 0  Mapping stats drop: 0

Port block alloc fail: 0

IP alias add fail: 0

Limit entry add fail: 0

My question is, how to decrease this entry without causing harm to the subs? I have seen these commands:

ip nat translation [timeout|tcp-timeout|...] --> will this command delete idle NAT session or any particular NAT session

ip nat transation max-enries ....    --> I understand that this will limit session a host/group of host can make. But if the threshold is exceeded, what will happen to the host? Say for example max entriy for a host is 10, what if a host want to make 11 session? What will happen with the last session.

I also have read about carier grade NAT/ large scale NAT, but have not found detail document. Could someone direct me?

Thanks,

Prima

Everyone's tags (2)
342
Views
0
Helpful
0
Replies
CreatePlease to create content