Hi
i got a 2821 and i have some problems with static nat
example
ip nat inside source 10.1.1.1 200.45.45.45
The problem is, when the server got a lot of hits the router stop doing the nat!!! yeap very weird
What i have to do? i remove the line and create again (copy paste) and the nat set again
Anyone can help me with this problem???????
Never happend before! :S
Greetings and thanks on advance
Ricardo
If the 2821 have the CPU more than 70% the Router will not go well.
Is possible that you have a lot of translations in the NAT table (you can clear table with "clear ip nat t *"), you have to avoid have a table very long.
- You have to upgrade the IOS router at least to 12.4(10).
- Limit the total translation in the router with "ip nat translation max-entries xxx"
- Limit the timeout of protocols (like icmp, tcp,..)
- Limit the timeout of dangerous ports (like tcp 4662,..)
You must be sure that the host 10.1.1.1 don't have worms.
Regards, Jose.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required