Hi stefan Yes , I have PAT enabled .
This Communication is Confidential. We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer -----Original Message----- From: Stefan Fouant [mailto:sfou...@shortestpathfirst.net] Sent: dimanche 28 mars 2010 02:43 To: Ibariouen Khalid; juniper-nsp@puck.nether.net Subject: RE: [j-nsp] NAT > -----Original Message----- > From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- > boun...@puck.nether.net] On Behalf Of Ibariouen Khalid > Sent: Friday, March 26, 2010 5:37 PM > To: juniper-nsp@puck.nether.net > Subject: [j-nsp] NAT > > Hi all > Can someone tell me what does "no nat vector means" exactelly : > > > GFW01(M)-> get counter statistics interface ethernet1/3 > Hardware counters for interface ethernet1/3: > in bytes 201903417 | out bytes 2103176764 | early frame > 0 > in packets 2949387186 | out packets 2468188341 | late frame > 0 > in no buffer 0 | out no buffer 0 | re-xmt limit > 0 > in overrun 63 | out underrun 0 | drop vlan > 0 > address spoof 0 | in icmp 164486382 | no nat vector > 1977 > > > in some document No nat vector Indicates the number of packets dropped > because the Network Address Translation (NAT) connection was > unavailable for the gate. > > > But it's not clear for me ? > 4 Public ip addresses are enought for 61973 sessions . If I recall correctly, that means that there aren't enough addresses in the NAT pool available for connections at the time a given connection is made. You might have 4 public addresses but do you have PAT enabled? Can you describe your setup in more detail? Stefan Fouant, CISSP, JNCIE-M/T www.shortestpathfirst.net GPG Key ID: 0xB5E3803D _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp