Increase IP nat translation total on Cisco ISR 4331

[adityasinghhj13]

at present i am having Cisco ISR 4331 running IOS 16.6.4. 

I want to increase the nat translations total from 131400 to 200000 , in order to do so should i increase the value using ip nat translation max-entries 200000 or ip nat translation max-entries all-hosts 200000.

Can someone help its urgent now...

[Flavio Miranda]

Hi

 "The ip nat translation max-entries all-host command can be used in scenarios where the Cisco ASR
1000 Series Router acting as ISG, performs NAT on all or most of the subscriber traffic. This helps the
operator to prevent a single host from occupying the entire translation table, while allowing a reasonable
upper limit to each host."

In your case,  you should change the max entry with the command ip nat translation max-entries 200000

[adityasinghhj13]

Hello Flavio, 

thankyou for your information i did the same and ran ip nat translation max-entries 200000 now how to check if the NAT Translation limit has been increased to 200000 , i tried all the show command for show ip nat translational but non of them show me the limit to which it has extended.
and to add the router was in HA active/standby setup , so i ran on both the routers once i saw translation being done on both routers, please let me know if my approach on running the command on both the routers was correct on not.
Thanks in advance

[Flavio Miranda]

Hello @adityasinghhj13 

   Sorry but actually the information I gave you was not right. Both command :

ip nat translation max-entries all-host

ip nat translation max-entries 200000

Will change the nat translation capacity for each host connected.  As per my searches, you can not change the NAT capacity of the router. The NAT capacity will be a sum up of CPU, Memory and Throughput.

What you can change is the licensing type in order to increase the Router capacity. The NAT limit will be related to Throughput capacity.

able 4.             Specifications of Cisco 4000 Family Integrated Services Routers

Technical Specifications	Cisco 4461	Cisco 4451	Cisco 4431	Cisco 4351	Cisco 4331	Cisco 4321	Cisco 4221
Aggregate Throughput (Default)	1.5Gbps	1 Gbps	500 Mbps	200 Mbps	100 Mbps	50 Mbps	35Mbps
Aggregate Throughput (Performance License)	3Gbps	2 Gbps	1 Gbps	400 Mbps	300 Mbps	100 Mbps	75 Mbps
Aggregate CEF Only[5] Throughput (Boost License)	Over 7Gbps	Over 4Gbps	Over 4Gbps	Over 2Gbps	Over 2Gbps	1.5Gbps

[MHM Cisco World]

I will try both command in csr1000v.

Update you soon.

[adityasinghhj13]

Thankyou in advance

[MHM Cisco World]

the effect of all-host max with config of max-entries 
NOW we have CSR1000v with max entries 2 and max all-host 1 
what this do 
this will allow R1 to have one entry in NAT table 
and allow R2 to have one entry in NAT table 
this total = 2 which is what we config in max-entries 
so here we must careful if we have 

if we have host 10 and set max all-host to 10 and later we set max-entries 50 then 5 host cannot use NAT since the UPPER limit ot total all NAT is reach. 
here if you want to specify NAT for each host use max all-host and adjust the max-entries 
if you want to specify ONLY UPPPER limit to total all NAT then only config max=entries 

[paul driver]

Hello
Why do you need to increase the nat table size, doing this can impact the whole rtr, I assume you are overloading - How may users do you have internally?