Hello Steven,
Sorry that your question is answered till now, basically the issue as it states is that the maximum entries allowed for the NATs are being used at the moment and any new conns that should be translated will be dropped. What can you do to solve this:
* Clear the nat translations, but this does not assure that the issue comes up back again.
* Increase the limit of NATs, but analize if this behavior of growing of conns is normal.
* Check the IP nat timeouts as well, it might be set to a longer timer, and the translations keeps in the table when it is not needed.
* Make sure to check the IP nat translation table (XLATES) to see if there is not anything anomalous, I mean that there could be a computer or more infected and functioning as a botnet and generating so many conns, causing the exhaustion.
Best regards, please make sure to qualify the answered if it came in handy!.
David Castro,
