del ... View more

All NAT configurations with ACL and UDP port ranges do not work; The solution is quite simple: "ip nat portgrange"; I.e we have the setup: [SX-20]--------{LAN}[Router 881]{WAN}-------{internet} SX-20 has IP 192.168.100.10; R881's LAN interface 192.168.100.1; R881's WAN interface 100.20.11.200; IOS version is 15.4(3)M7; Our configuration must meets the requirements: 1) SX-20 must be able to accept inbound calls from internet; 2) SX-20 must be able to call any video terminal in internet; 3) Network administrator must be able to connect to R881's console via SSH from internet; !------Configuration------! interface Vlan2  description ***LAN***  ip address 192.168.100.1 255.255.255.0  no ip redirects  ip nat inside  ip virtual-reassembly in ! interface FastEthernet4  description ***WAN***  ip address 100.200.11.200 255.255.255.0  no ip redirects  ip nat outside  ip virtual-reassembly in ! ip route 0.0.0.0 0.0.0.0 172.20.11.1 ! ! The ACL below should contains only IP address of SX-20; ip access-list extended VKS-TERMINAL  permit ip host 192.168.100.10 any ! ip nat portmap RTP-RANGE-PORTMAP  appl udp-rtp startport 16384 size 16384 ! ! SSH connection to router; ip nat inside source static tcp 192.168.100.1 22 interface FastEthernet4 22 ! HTTP connection to SX-20's web interface ip nat inside source static tcp 192.168.100.10 80 interface FastEthernet4 80 ! Inbound SIP signaling; ip nat inside source static udp 192.168.100.10 5060 interface FastEthernet4 5060 ip nat inside source static udp 192.168.100.10 5061 interface FastEthernet4 5061 ip nat inside source static tcp 192.168.100.10 5060 interface FastEthernet4 5060 ip nat inside source static tcp 192.168.100.10 5061 interface FastEthernet4 5061 ip nat inside source static udp 192.168.100.10 5062 interface FastEthernet4 5062 ! Inbound H.323 signaling; ip nat inside source static tcp 192.168.100.10 1718 interface FastEthernet4 1718 ip nat inside source static tcp 192.168.100.10 1719 interface FastEthernet4 1719 ip nat inside source static tcp 192.168.100.10 1720 interface FastEthernet4 1720 ! The entry below allows SX-20 connect to internet and allows inbound RTP connections; ip nat inside source list VKS-TERMINAL interface FastEthernet4 overload portmap RTP-RANGE-PORTMAP ... View more

IOS-XE supports the SNMP MIB since 3.15 version And there are at least two methods for a manipulating expression-MIB 1) With EEM Tcl script ( The right way) I.e this Tcl script: Cli Value 2 Snmp Expr MIB 2) With EEM CLI applet (Simple, but potentially can conflict with other EEM applets). Below lab config (Use at your own risk!): 1. Create expression owner snmp mib expression owner nat name 1   description Total active translations   value type integer32 2. EEM applet Every 10 minutes the applet sets the total number of translations to expression MIB. The SNMP OID for pullig 1.3.6.1.2.1.90.1.2.1.1.3.3.110.97.116.1.49 How to calculate OID: Custom MIB (page10) no event manager applet test event manager applet test  event timer watchdog time 600 maxrun 60  action 010 cli command "enable"  action 030 cli command "configure terminal"  action 040 cli command "do-exec show ip nat translations total"  action 090 regexp "^.+\s([0-9]+)" "$_cli_result" match total_translations  action 100 cli command "snmp mib expression owner nat name 1"  action 110 if $_regexp_result eq "1"  action 120  cli command "expression $total_translations"  action 130 else  action 140  cli command "expression 0"  action 150  cli command "exit"  action 160 end ... View more

del ... View more

Installing CSL Licenses for Cisco IOS XE 3.13S and Later: http://www.cisco.com/c/en/us/td/docs/routers/csr1000/software/configuration/csr1000Vswcfg/licensing.html#pgfId-981158 ... View more