1. Home
  2. Cisco Systems
  3. why mutiple NAT/PAT session mapping

why mutiple NAT/PAT session mapping

Dear All Guru :

Under what conditions , the PAT will have more session mapping ?

In theory , if the client site always using the same ip and port no, go to the same destination ip , port ; there should be one PAT mapping , right ?

lab>sho ip nat tran | inc 10.20.2.197 udp 202.xxx.yyy.34:1024 10.20.2.197:5060 210.xx.yy.zz:5060

210.xx.yy.zz:5060 udp 202.xxx.yyy.34:1058 10.20.2.197:5060 210.xx.yy.zz:5060 210.xx.yy.zz:5060

client 10.20.2.197 , port 5060 unchanged destination 210.xx.yy.zz , port 5060 unchanged

ps: the NAT device is Cisco Router IOS NAT Cisco Internetwork Operating System Software IOS (tm) 3600 Software (C3620-IK9O3S6-M), Version 12.3(5a), RELEASE SOFTWARE (fc1)

Thanks for telling me any ideas

Reply to
JJ
Loading thread data ...

it's interesting you ask this because I do not see the point in doing PAT in the situation as above. I have seen issues with this when using SIP and CBAC (ip inspect) with a Cisco 837 in that SIP responses from the proxy server (to the PAT port) are denied. To overcome this I needed to put a static translation for port 5060 client/server. Anyone else seen this ??

Carl

Reply to
Carl

Assuming the SOURCE port is not ephemeral, then yes. In your example below, the source ports are different.

Reply to
Hansang Bae

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.