nat time out static translations

From: Jens Petter Johansen (jenseike@start.no)
Date: Sun Apr 20 2008 - 08:23:55 ART


hi group..

i am trying to use nat for some dhcp clients.. Problem is that the nat pool is
filling up and do not time out the static translations.. With this happening
the addresses are quiqly beeing used and
are not awailable for new clients.. The pool are going to wlan clients that
are using radius for authentications.. Anybody that have any idea of why this
is happening??- I have set the tcp timeout to
one hour but this do nothing with regards to the problem..

ip dhcp pool wlan-Lilleakeruncrypt

   network 172.17.4.0 255.255.252.0

   domain-name statkraft.com

   default-router 172.17.4.1

   dns-server 193.212.95.25

   lease 3

wlan-glue#sh run | in nat

 ip nat inside

 ip nat inside

 ip nat outside

ip nat translation tcp-timeout 3600

ip nat pool ukryptert 193.215.248.20 193.215.248.250 netmask 255.255.255.0

ip nat inside source list 1 interface GigabitEthernet0/2 overload

ip nat inside source list 2 pool ukryptert

wlan-glue#sh ip nat sta

Total active translations: 157 (0 static, 157 dynamic; 36 extended)

Outside interfaces:

  GigabitEthernet0/2

Inside interfaces:

  GigabitEthernet0/0.50, GigabitEthernet0/0.70

Hits: 410559959 Misses: 9633718

Expired translations: 1990190

Dynamic mappings:

-- Inside Source

[Id: 1] access-list 1 interface GigabitEthernet0/2 refcount 35

[Id: 3] access-list 2 pool ukryptert refcount 121

 pool ukryptert: netmask 255.255.255.0

        start 193.215.248.20 end 193.215.248.250

        type generic, total addresses 231, allocated 121 (52%), misses 76929

Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:51 ART