User's Manual

406
Users Manual of CS-6306R
ip nat translation
icmp-timeoutseconds
Set the timeout time of the ICMP NAT
(the default time is 60 seconds).
ip nat translation
syn-timeoutseconds
Set the timeout time of the NAT in the
TCP SYN state (the default time is 60
seconds).
ip nat translation finrst-timeout
seconds
Change the TCP FIN/RST timeout
value (the default value is 60 seconds).
There are three methods to limit the NAT connections. Run the following commands in global configuration
mode to realize the three methods.
Run... To...
ip nat translation
max-entriesnumbers
Set the maximum number of the
translation items (the default value is
4000).
ip nat translation max-links
A.B.C.Dnumbers
Limit the maximum number of the NAT
connection items that the designated
inside IP address creates. There is no
default value.
ip nat translation max-links all
numbers
Limit the maximum number of the NAT
connection items that a single IP
address creates. The default value is
the same as max-entries.
43.2.3.6 Monitoring and Maintaining NAT
The dynamic NAT is to time out by default according to the time regulated by the NAT transfer table. You can
run the following commands in management mode to clear up the timeout item before the timeout occurs.
Run... To...
clear ip nat translation
Clear up all transfer items from the NAT
transfer table.
clear ip nat translation inside local-ip
global-ip [outside local-ip global-ip]
Clear up a simple dynamic translation
item containing inside translation,
outside translation or both.
clear ip nat translation
outsidelocal-ip global-ip
Clear up a simple dynamic translation
item containing outside translation.
clear ip nat translation inside local-ip
local-port global-ip global-port [outside
local-ip local-port global-ip global-port]
Clear up expansible dynamic
translation items.