we have some unusual issue when our core 3825 series router dealing with NAT !
first off to offload traffic we have two router one 3825 and other 2821 configured to support GLBP .
interface GigabitEthernet0/0
ip address a.b.c.d 255.255.255.0
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
media-type rj45 !
interface GigabitEthernet0/1
ip address 10.11.a.b 255.255.0.0
ip nat inside ip virtual-reassembly
duplex auto
speed auto
media-type rj45
glbp 1 ip 10.11.0.v
glbp 1 load-balancing host-dependent
glbp 1 authentication text --------
ip nat inside source list 11 interface GigabitEthernet0/0 overload
!
access-list 11 permit 10.11.0.0 0.0.255.255
NOW look at the console error describing memory issues with NAT AND lack of memory
*Dec 17 08:50:19.618: %SYS-2-CHUNKEXPANDFAIL: Could not expand chunk pool for ipnat globaltr. No memory available -Process= "Chunk Manager", ipl= 4, pid= 1, -Traceback= 0x60046F6Cz 0x62C31434z 0x62C31418z
*Dec 17 08:50:29.282: %SYS-2-MALLOCFAIL: Memory allocation of 65536 bytes failed from 0x6004B8F8, alignment 8 Pool: Processor Free: 345524 Cause: Memory fragmentation Alternate Pool: None Free: 0 Cause: No Alternate pool -Process= "Chunk Manager", ipl= 4, pid= 1, -Traceback= 0x600145D0z 0x6002E7B4z 0x600482C0z 0x60046D9Cz 0x60046F28z 0x62C31434z 0x62C31418z
*Dec 17 08:50:29.622: %SYS-2-CHUNKEXPANDFAIL: Could not expand chunk pool for ipnat entry. No memory available -Process= "Chunk Manager", ipl= 4, pid= 1, -Traceback= 0x60046F6Cz 0x62C31434z 0x62C31418z
The problem is router hangs out , intenet users suffer slowness , criticle service like telnet doesnt work . the only solution i found is a reload ,
not to mention this is core router sitting on campus network edge . and servicing around 1000 users !! approx assuming all users have using internet at same time .
how to check , if memory is not sufficient ?
further if any users using utorrent or any thing like that , does it make enormous no of connections form same pc ?
is their any licence requird for IOS IPS ?
i prefer to turn this feature on to kill torrents connections ? but i fear crashing of router as no of users are huge !
any know bug with glbp , nat with ip voice image C3825-IPVOICE-M VERSION 12.4(24) T4 ???
