cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
203
Views
0
Helpful
0
Replies

CGN problems on ASR1002HX (with banks)

Hi Community!

I've some problems with one ASR1002HX

I have several deployments in different cities, but with only one, the sessions in some home banking get closed after some minutes. It's not exact, sometimes after 1 minute, other after 4 minutes (always with activity)
i've made different tests, i've compared the config with other ASR1002HX, i've changed the public ip pool, i've set the following parameters, just for testing without any result.

ip nat translation timeout 3000
ip nat translation tcp-timeout 10000
ip nat translation udp-timeout 10000
ip nat translation finrst-timeout 45
ip nat translation syn-timeout 45
ip nat translation dns-timeout 45
ip nat translation icmp-timeout 300
ip nat translation dns-timeout 45
ip nat translation icmp-timeout 300

the mode is cgn
ip nat settings mode cgn

i don't lost connection to internet, not speed problems, just this problem of forced logout of the banking session.
this router has a low cgn load, with few sessions

this is my config summary
outside interface
ip nat outside
inside interface
ip nat inside
....
ip nat settings mode cgn
no ip nat settings support mapping outside
ip nat translation timeout 3000
no ip nat service dns tcp
no ip nat service dns udp
no ip nat service dns-v6
ip nat pool nat-pool x.x.x.1 x.x.x.253 netmask 255.255.255.0
ip nat inside source list 10 pool nat-pool overload

i'd appreciate any help!!! thanks!!
Gabriel

0 Replies 0