cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4390
Views
0
Helpful
4
Replies

CGNAT for ASR1001-X and ASR1001-HX

colin.tse1
Level 1
Level 1

Can anyone suggest if CGNAT (Large Scale NAT) can be enabled for ASR1001-X and ASR1001-HX and how?

4 Replies 4

Mark Malone
VIP Alumni
VIP Alumni
Hi
This doc says it was released in 1001 with limitations in 3.6 release
https://blog.it-playground.eu/carrier-grade-nat-on-asr1000/

Here is the install guide for it
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-cgn.html

####
I see it available in the 1002 ESP module too
Cisco ASR 1002-HX with Integrated ESP Module
Security


Up to:
● IPsec: 8,000 tunnels
● Firewall: 6,000,000 sessions and 220,000 sessions-per-sec setup rate
● NAT: 6,000,000 sessions and 300,000 sessions-per-sec setup rate
● Carrier-Grade NAT: 12,000,000 sessions

https://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/datasheet-c78-731640.html

Thank you all. Do I need specific license to activate this? I read some posts and someone said I need to upgrade to 20G license in order to activate this. Does it come as default?

You dont get 20GB as default on an ASR ,thats what one of my license throughputs looks like below , its default running advanced enterprise


sh license feature
Feature name Enforcement Evaluation Subscription Enabled RightToUse
adventerprise yes yes no yes yes
advipservices yes yes no no yes
ipbase no no no no no
avc yes yes no no yes
broadband no no no no no
broadband_4k no no no no no
cube_250 no no no no no
cube_250_red no no no no no
cube_ent_100 no no no no no
cube_ent_100_red no no no no no
cube_lab no no no no no
cube_video_b2btp no no no no no
cube_video_b2btp_red no no no no no
firewall no no no no no
fpi no no no no no
fwnat_red yes yes no no yes
gtp_addon_aic no no no no no
internal_service yes no no no no
ipsec yes yes no no yes
lawful_intr yes yes no no yes
lisp yes yes no no yes
nat64_stateful_2m no no no no no
otv yes yes no no yes
sgt_fw no no no no no
sw_redundancy yes yes no no yes
throughput_5g yes yes no no yes
throughput_5g_to_10g yes no no no no
throughput_5g_to_20g yes no no no no
throughput_10g yes yes no no yes
throughput_10g_to_20g yes no no no no
throughput_20g yes yes no no yes
vpls yes yes no no yes
interface_10g yes yes no no yes
FoundationSuiteK9 yes yes no no yes
AdvUCSuiteK9 yes yes no no yes

Looks like you need a license alright , see this in the docs

https://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html#_Toc7831162

A Cisco IOS XE IP Base consolidated package and CGN license facilitate the CGN feature on the router.

Review Cisco Networking for a $25 gift card