ACE NAT pool monitoring?

mberkaIPG · ‎10-17-2013

Hi all:

We're running a pair of 4710s in one-armed mode, so we source NAT all connections to the real servers. We recently had a situation when one of our PAT addresses went over 64000 connections, and as such started dropping new ones. This was easily remedied by adding another PAT address to the pool, but it got me thinking - can we graph the NAT translations? I can (somewhat) easily get a count by doing a "show xlate | include x.x.x.x | count", but I was wondering if someone might know if this is available via SNMP? I've searched through the MIBs and not found anything that really matches.

Just wanted to throw it out to the community and see if anyone else has invented this particular wheel.

Thanks,

mjb

chrhiggi · ‎10-24-2013

MJB-

SNMP was never updated to show nat pool exhaustion. Your best bet for automation would be to use the XML API and monitor this command: show np 1 me-stats "-socm" | i "NAT Pool Alloc \[fail\]"

It incriments whenever we cannot allocate a source NAT.

Regards,

Chris Higgins