RE: Control tcp session number

From: Justin Menga (Justin.Menga@xxxxxxxxxxxxxxxxxx)
Date: Tue Nov 14 2000 - 02:20:59 GMT-3

   
   You can only limit the maximum entries on a global scale..........
   
   The only other way would be if you had lots of IP addresses and used
   one-to-one mappings from a pool of 100 addresses - but not very
   practical.
   
   Regards,
   
   Justin Menga MCSE+I CCNP CCSE ASE
   WAN Specialist
   Computerland New Zealand
   PO Box 3631, Auckland
   DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
   mailto: justin.menga@computerland.co.nz
   
   -----Original Message-----
   From: Wu,Jiang [mailto:wujiang@bj163.com]
   Sent: Tuesday, 14 November 2000 5:12 p.m.
   To: Justin Menga
   Cc: ccielab@groupstudy.com
   Subject: Re: Control tcp session number
   
   Is there a way to combine the two methods together? For example, I
   want to allow someone to use tcp session 80 while I do not want him to
   use over 100 sessions. Any idea?
   
   
   
   Regards,
   
   ----- Original Message -----
   
   From: Justin Menga
   
   To: 'Wu,Jiang' ; ccielab@groupstudy.com
   
   Sent: Tuesday, November 14, 2000 4:05 AM
   
   Subject: RE: Control tcp session number
   
   Not too sure what exactly you are asking but:
   
   
   
   1. You can certainly control what traffic (to the TCP/UDP level) you
   are translating by using acls or route maps with your NAT
   configurations
   
   
   
   e.g. NAT only applies for telnet traffic:
   
   
   
   ip nat inside source list 100 int s0 overload
   
   access-list 100 permit tcp 10.0.0.0 0.0.0.255 any eq telnet
   
   
   
   int e0
   
     ip nat inside
   
   int s0
   
     ip nat outside
   
   
   
   2. You can limit the number of NAT translations via ip nat
   translations max-entries command
   
   
   
     Regards,
     
     Justin Menga MCSE+I CCNP CCSE ASE
     WAN Specialist
     Computerland New Zealand
     PO Box 3631, Auckland
     DDI: (+64) 9 360 4864 Mobile: (+64) 25 349 599
     mailto: justin.menga@computerland.co.nz
     
   -----Original Message-----
   From: Wu,Jiang [mailto:wujiang@bj163.com]
   Sent: Sunday, 12 November 2000 8:10 p.m.
   To: ccielab@groupstudy.com
   Subject: OT:Control tcp session number
   
   Hi group,
   
   Can I limit tcp session number (or nat translation number) for some
   hosts?
   
   
   
   Thanks,
   
   Wu

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:44 GMT-3