<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">30.07.2014 16:52, Marcin Kuczera пишет:<br>
</div>
<blockquote cite="mid:53D8CE5E.10905@leon.pl" type="cite">
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<div class="moz-cite-prefix">On 2014-07-29 19:09, Stanislav Volkov
wrote:<br>
</div>
<blockquote
cite="mid:AAC1AA85-99E7-486C-8374-A519810B1D12@tele-a.ru"
type="cite">
<pre wrap="">Only CG-NAT is supported on LAG. </pre>
</blockquote>
<br>
well, we have a CG-NAT license, but does that changes anything in
NAT configuration in LAGs ?<br>
<br>
Regards,<br>
Marcin</blockquote>
<br>
You should change your nat policy type to enhanced. Example from
documentation:<br>
<br>
<blockquote type="cite">
<pre class="precd" style="font-family: monospace; font-size: 11px; color: rgb(0, 0, 0); font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">configure
!
software license
nat enhanced password <em class="LOWEMPH">enhanced-nat-password</em> <--<strong class="MEDEMPH">Enable the license for enhanced NAT features </strong>
!
context nat-context
!
nat logging-profile nat-log-profile <--<strong class="MEDEMPH">Create a NAT logging profile</strong>
transport-protocol udp
export-version v9
source 10.2.1.1 port 4242
destination 10.2.1.2 context nat-context port 8989
dscp ef
maximum ip-packet-size 1400
!
ip nat pool nat-pool napt paired logging <--<strong class="MEDEMPH">Configure an Enhanced NAT pool</strong>
logging-profile nat-log-profile
paired-mode subscriber over-subscription 100 port-limit 2000
address 100.1.1.1 to 100.1.1.20 port-block 0 to 15
exclude well-known <strong class="MEDEMPH"> <-Excludes TCP and UDP ports 0-1023 from the entire pool</strong>
exclude 5888 to 6015 <strong class="MEDEMPH"><-Excludes a given port range from the given address or address range of a pool</strong>
!
policy access-list nat-acl
seq 10 permit udp 192.168.0.0 0.0.255.255 192.168.100.0 0.0.0.255 class voip-class
seq 20 permit icmp 192.168.0.0 0.0.255.255 any class nat-class
seq 30 permit udp 192.168.0.0 0.0.255.255 any class nat-class
seq 40 permit tcp 192.168.0.0 0.0.255.255 any class nat-class
!
nat policy nat-policy enhanced <--<strong class="MEDEMPH">Create an enhanced NAT policy</strong>
! Default class
drop
! Named classes
access-group nat-acl <--<strong class="MEDEMPH">Configure an Access Group and Class</strong>
class voip-class
ignore
class nat-class
pool nat-pool nat-context <--<strong class="MEDEMPH">Refer to the enhanced NAT pool</strong>
endpoint-independent filtering tcp
endpoint-independent filtering udp
inbound-refresh udp
timeout abandoned 3600
icmp-notification</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Stanislav Zaikin
OJSC "Ufanet"
</pre>
</body>
</html>