Re: ip nat translation tcp-timeout

antonio.guirado · ‎05-09-2003

Hi!,

we have problems with Messenguer and NAT. I think that Messenguer uses a protocol not very robust base to a SSL (443) TCP session. The problem is

that out CISCO internet router is configuring with NAT with a tcp-timeout of

60 seconds because of serveral questions. So when a user is not

generating traffic the tcp NAT timeout removes the session. After that

user must reconnect Messenguer.

I think that with the following command perhaps could solve the problem:

"ip nat translation port-timeout tcp 443 never"

After some tests we have noticed that router always applied the timeout that

is configured in the command "ip nat translation tcp-timeout 60".

Is it a normal behaviour? is a bug? Any ideas how can i solve the problem?

CONFIGURATION

ip nat translation tcp-timeout 60

ip nat translation port-timeout tcp 443 never

ip nat pool POOL-PUBLICO X.X.X.X X.X.X.Y netmask 255.255.255.0

Thanks!

ip nat inside source list 1 pool POOL-PUBLICO overload

tepatel · ‎05-10-2003

Try using only one command "ip nat translation port-timeout tcp 443 never" by removing the "ip nat translation tcp-timeout 60".

Or

you can use "ip nat translation tcp-timeout ..." with very high value of seconds. Max is 24 hours.

Also don't forget to use "clear ip nat translation * " everytime you change the nat config. For more information pl. visit following url