[c-nsp] 2821 NAT Limitations

Ge Moua moua0100 at umn.edu
Wed Oct 13 17:38:16 EDT 2010


  we do upwards of 75,000 NAT sessions on an asa-5550 with no problems; 
bad thing here for you is that you'll also need a router platform to do 
the route maps

not sure if you can split the functions, but if so then this might work 
for you.

--
Regards,
Ge Moua
Network Design Engineer

University of Minnesota | OIT - NTS
--


On 10/13/10 4:11 PM, Dan Letkeman wrote:
> Hi,
>
> Wondering if anyone has some experience with the NAT limitations on a
> 2821 router?  I have about 1500 users, which about half of them are on
> the internet at one time, but we have a proxy web filter appliance
> that all of the clients connect to that does a website lookup, and
> check before it lets the client access the page, so it creates a
> separate entry for every page requested.  This doubles the NAT entries
> in the router.
>
> Would 40,000 - 60,000 NAT translation entries be too much for a 2821?
> It's not doing much else except NAT and a couple of route-maps.
>
> If so would device would be recommended that could handle this amount
> of translations?
>
> Thanks,
> Dan.
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list