Re: NAT stucks

From: C. Jon Larsen (jlarsen@richweb.com)
Date: Thu Mar 01 2001 - 20:11:04 EST


You can set timeouts in the nat config that are more aggressive than the
defaults. On a busy router this may help:

ip nat translation timeout 3600
ip nat translation tcp-timeout ....

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

my $info = {

c jon larsen => 'richweb.com',
email: => 'jlarsen@richweb.com',
wireless: => '+804.307.6939',

};

PGP Key fingerprint: 8A 62 4C 6E 1E 3C CD 63 B3 16 1A 1B D2 61 EE 97
PGP Public key available at: http://richweb.com/cjl.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

On Fri, 2 Mar 2001, Kazu Kimura wrote:

> What is the result of "sh ip nat stat"?
> Also please check "sh proc mem | inc nat (or NAT)".
> Maybe it will describe the reason.
>
> Regards,
>
> Kazu
> On Thu, 01 Mar 2001 18:08:59 -0600
> "Rafael A. Reta Rodriguez" <rafareta@icave.com.mx> wrote:
>
> > Sometimes (a couple of times each day) NAT (PAT) stops translating SMTPservices while translating other services like telnet and HTTP. When thishappens I clear ip nat translation * and every thing works properly.I use a 3640 with IOS 12.0(5)I did a show ip nat translation and got 606 lines of translations reportwith 206 like this:--- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.137 10.119.1.65 --- ---
> > --- 148.206.5.138 10.119.16.134 --- ---
> > and did a show mem with this header:
> > Head Total(b) Used(b) Free(b) Lowest(b) Largest(b)
> > Processor 60FD9E20 12739040 4548268 8190772 168392 8105984
> > I/O 1C00000 4194304 2014528 2179776 2078924 2106652
> > What is wrong?
> > Why do I keep all this translations alive?
> > show ip nat tranalation verbose give me a lot of:
> > create 00:08:39, use 00:08:34, left 23:51:25,
> > TIA
> > RafaReta
> > ICAVE
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:30 EDT