Normal number of nat translations?

[byron]

28xx cisco router with 500 users behind it what normal number of nat translations?

I have 18 vlans. One vlan has 10000 nat translations with the others at 10-300. Damn virus.

[Georg Pauwen]

Hello,

10000 NAT translations seems high indeed. You could try to rate limit your translations, check the document below for details.

How do you have your NAT implemented (e.g. PAT) ?

Rate Limiting NAT Translation

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps5207/products_feature_guide09186a00801d09f0.html#1048300

Regards,

GP

[byron]

yes pat

I went with

ip nat translation timeout 600

ip nat translation tcp-timeout 600

ip nat translation udp-timeout 600

I can't login to that webpage by the way.

[i.santos]

router(config)#ip nat translation max-entries ?

<1-2147483647> Number of entries

all-vrf Specify maximum number of NAT entries for each vrf

vrf Specify per-VRF NAT entry limit

router(config)#ip nat translation max-entries

[Kevin Dorrell]

Try the URL without the "partner/":

http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801d09f0.html#1048300

Most of CCO is available to the public, but unfortunately if we access the page using a logged-in window, then the resulting URLs are restricted to registered users. But most of them are available to the public, just by removing the "partner/" or "customer/" part of the URL.

Kevin Dorrell

Luxembourg

[Tsasbrink]

wouldn,t it be better investigating the cause instead of the results ?

You most certainly must be able to point out the cause by just having a look at these translations with "show ip nat translation"

Otherwise cache flow can tell you a lot more about the problem.