<div dir="ltr"><div><div><div>Hi,<br><br></div>Tanks for advice...<br><br>In case of NAT many to many... <br>IMO, it can't be done without any problems... so i decided to create serval NAT policies and NAT pools with single IP/32 and port-block 1 to 15 <br>
<br></div>NAT policies without acl (names) can be dynamically returned from RADIUS but in this case i can't define (ACL) destination addresses in my local network which must be reachable without NAT translation...<br>
<br></div>Am i wrong ?<br><br>Regards<br><div><div><div><br></div></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/2/18 Navin Nepali <span dir="ltr"><<a href="mailto:navin_n@yahoo.com" target="_blank">navin_n@yahoo.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-size:12pt;font-family:arial,helvetica,sans-serif"><div><span>I think in SE, the NAT is not ALG based..I remember when i used NAT in my network many connections are dropped for applications such as FTP, IPSec VPN etc. When I asked the SE support, they told me the NAT is not ALG based.</span></div>
<div><span></span> </div><div><span>I don't know as of now many be Ericsson may have already developed NAT ALG.</span></div><div><span></span> </div><div><span>Thanks.</span></div><div><br></div> <div style="font-family:arial,helvetica,sans-serif;font-size:12pt">
<div style="font-family:times new roman,new york,times,serif;font-size:12pt"> <div dir="ltr"> <font face="Arial"> <div style="margin:5px 0px;padding:0px;border:1px solid rgb(204,204,204);min-height:0px;line-height:0;font-size:0px" readonly>
</div> <b><span style="font-weight:bold">From:</span></b> Piotrek S. <<a href="mailto:komuch@gmail.com" target="_blank">komuch@gmail.com</a>><br> <b><span style="font-weight:bold">To:</span></b> <a href="mailto:redback-nsp@puck.nether.net" target="_blank">redback-nsp@puck.nether.net</a> <br>
<b><span style="font-weight:bold">Sent:</span></b> Monday, February 18, 2013 4:13 PM<br> <b><span style="font-weight:bold">Subject:</span></b> [rbak-nsp] NAT configuration<br> </font> </div><div><div class="h5"> <br>
<div><div dir="ltr"><div><div><div><div><div><div>Hi,<br><br></div>Can anyone tell me how can i configure NAT many to many ?<br><br></div>Currently i have:<br><br>ip nat pool pool-NAT-customers napt multibind<br></div>address xxx.xxx.xxx.xx1/32 port-block 15 to 15<br>
address xxx.xxx.xxx.xx2/32 port-block 15 to 15<br>address xxx.xxx.xxx.xx3/32 port-block 15 to 15<br>address xxx.xxx.xxx.xx4/32 port-block 15 to 15<br>...<br>address xxx.xxx.xxx.x49/32 port-block 15 to 15<br><br>nat policy pol1<br>
! Default class<br> ignore<br> icmp-notification<br>! Named classes<br> access-group NAT-ACL<br> class NONAT<br> ignore<br> icmp-notification<br> class cls-NAT-1-26<br> pool pool-NAT-customers BRAS<br> timeout tcp 18000<br>
timeout udp 60<br> timeout fin-reset 60<br> timeout icmp 30<br> timeout syn 60<br> admission-control tcp<br> admission-control udp<br> admission-control icmp<br> endpoint-independent filtering udp<br>
no icmp-notification<br>!<br><br></div>Why many established connections are dropped (like SSH, HTTPS sessions, etc.) after short period of idle time even though tcp timeout is set to 18000 ? <br><br></div>Thanks for help.<br>
<br></div>Regards<br></div>
</div><br></div></div>_______________________________________________<br>redback-nsp mailing list<br><a href="mailto:redback-nsp@puck.nether.net" target="_blank">redback-nsp@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
<br><br> </div> </div> </div></div></blockquote></div><br></div>