PAT Limits and monitoring - ACE-20

[stevebrockleank]

Hi Guys,

Is anyone able to confirm the PAT limit on the ACE-20s please. I initially read it as 1 million (the NAT limit), however I have since read that for PAT, its 4 million as it uses the connection record information and not xlate.

I've always wondered why the xlate line under 'show resource usage' is zero. If PAT does use the connection record then this would explain why, however its confusing as when running a 'show xlate' command you do see all the current PAT entries.

Thanks for any assistance.

[Daniel Arrondo Ostiz · Accepted solution]

Hi Steve,

I can confirm that the PAT limit on ACE20 is 4M

Regards

Daniel

[stevebrockleank]

Thanks Daniel. Thats great news.

[stevebrockleank]

Hi Adnan,

If it helps this is where I first found reference to the 4million PAT entries

http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_(ACE)_Troubleshooting_Guide_--_ACE_Resource_Limits

Its in the table under the 'Security-Related Limits' heading

HTH

Steve

[adnanfarid]

Dear Daniel,

May you please give some reference as i have to quote the same to my company.

I am searching for some official reference but still could'nt find it.

Thanks in advance,

Adnan

[Daniel Arrondo Ostiz]

Hi Adnan,

I'm afraid this number is not documented externally anywhere, but this number was confirmed internally by the development team.

I know you probably would prefer to have an external document specifying this, but, for the report to your company, you can quote me as a TAC engineer.

Regards

Daniel