help in reducing cpu when using NAT & Policy map

[Dr.X]

hi , i would like to ask about using NA , im uisng Bras router with thousandes of users ,

i made a static nat for only one user  by #ip nat inside source xxxxx xxxx, and applied it to the interface router ,

the porblem occures that the cpu of the router  begins to exceed 90 % of usage !!!!!!!!!!!!

can i use another thing by reducing the trafffic ??

another issue ,

i alose use policy map  , does it gets alot of cpu usage ???

regads

[Ton V Engelen]

Hi

so, how many nat translations does this one user has?

I ve seen one user using 4000+ nat translations, which caused the cpu of a small router to go to 99%

show ip nat trans

show ip nat stats

that way you can see how many translations the user has.

If you want to restrict i

ip nat translation max-entries host

Like  f.i.

ip nat translation max-entries host 10.1.1.1 500. This user can now have 500 nat translations