topic PAT Limits and monitoring - ACE-20 in Application Networking

PAT Limits and monitoring - ACE-20

stevebrockleank — Thu, 15 Dec 2011 10:24:04 GMT

Hi Guys,

Is anyone able to confirm the PAT limit on the ACE-20s please. I initially read it as 1 million (the NAT limit), however I have since read that for PAT, its 4 million as it uses the connection record information and not xlate.

I've always wondered why the xlate line under 'show resource usage' is zero. If PAT does use the connection record then this would explain why, however its confusing as when running a 'show xlate' command you do see all the current PAT entries.

Thanks for any assistance.

PAT Limits and monitoring - ACE-20

Daniel Arrondo Ostiz — Mon, 19 Dec 2011 10:25:00 GMT

Hi Steve,

I can confirm that the PAT limit on ACE20 is 4M

Regards

Daniel

PAT Limits and monitoring - ACE-20

stevebrockleank — Mon, 19 Dec 2011 10:36:56 GMT

Thanks Daniel. Thats great news.

PAT Limits and monitoring - ACE-20

adnanfarid — Wed, 18 Jan 2012 06:10:44 GMT

Dear Daniel,

May you please give some reference as i have to quote the same to my company.

I am searching for some official reference but still could'nt find it.

Thanks in advance,

Adnan

PAT Limits and monitoring - ACE-20

Daniel Arrondo Ostiz — Wed, 18 Jan 2012 08:46:09 GMT

Hi Adnan,

I'm afraid this number is not documented externally anywhere, but this number was confirmed internally by the development team.

I know you probably would prefer to have an external document specifying this, but, for the report to your company, you can quote me as a TAC engineer.

Regards

Daniel

PAT Limits and monitoring - ACE-20

stevebrockleank — Fri, 20 Jan 2012 16:05:57 GMT

Hi Adnan,

If it helps this is where I first found reference to the 4million PAT entries

http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_--_ACE_Resource_Limits

Its in the table under the 'Security-Related Limits' heading

HTH

Steve