remove static NAT's which are not in use

[kunal-united]

Hi,

I have like 3000 static NAT's applied on PIX.

question 1 ) Is there a way on pix to tell which are in use and which are not? Please provide link/reference.

I know that 2000 static NAT statements are not needed.

question 2) what is the memory consumed for each access-list statement?

Thanks,

Kunal

[kunal-united]

Please help!

Thanks,

Kunal

[varrao]

Hi Kunal,

Fir removing any static nats, you first need to identify what traffic is not passing through the firewall. If there are 2000 nats to be rremoved, there's got to be a good reason for it. May be the interfaces have changed or ip addresses have changed, if so try to search the nats from the running config corresponding to interafce name or ip address not in use, like this:

show run | in takes

show run | in

and delete those statics.

Typically an ACE 172 bytes of memory, but might increase dependiong upon the type of access-list and number of nodes in it.

Thanks,

Varun