RE: NAt oh NAT

From: Chuck Church (cchurch@MAGNACOM.com)
Date: Fri Sep 20 2002 - 19:55:30 GMT-3


Imo,

        What version are you running on the MSFC? Is it an MSFC 1 or 2? Is
CEF enabled and running correctly? I though NAT could be fast switched.
What does your 'sh proc cpu' show as the offending process? Or is it
interrupts?

Chuck Church
CCIE #8776, MCNE, MCSE
Sr. Network Engineer
Magnacom Technologies
140 N. Rt. 303
Valley Cottage, NY 10989
845-267-4000

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
IMO ETUK
Sent: Friday, September 20, 2002 4:40 PM
To: ccielab@groupstudy.com
Subject: NAt oh NAT

Hi all,

I seem to be having problems with a NAT config. Currently NAT is
configured on a 6506 which is running native IOS. I have 4,000 users
natted to 13 IPs and my processor utilization is not too happy about
this, its sitting at 80& util now.

I have tried tweaking timers and such on NAT but no dice. Is there any
thing else that i can do to aleviate the cpu utilization?

Here are my timers

 ip nat translation timeout 180
 ip nat translation tcp-timeout 300
 ip nat translation udp-timeout 30
 ip nat translation finrst-timeout 15
 ip nat translation dns-timeout 15

------------

Here is my NAT config - some of it

ip nat pool Towson_U xx.xx.xx.11 xx.xx.xx.23 prefix-length 26
ip nat inside source list 99 pool nat_router overload
access-list 99 permit a.b.0.0 0.0.255.255

where a and b are private IPs :)
the xx.xx are publics :)

So i have 13 VLANs going to the pool nat_router.

Any thoughts?

Thanks

Imo



This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:43:58 GMT-3