Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-22 Thread Aaron
I'm wondering if cgn nat44 supports adding an additional subnet to an existing cgn nat44 service. in my test lab, i added an additional subnet to my cgn nat44 service (call it subnet B) and i did not see the additional addresses show up in the ..."sh cgn nat44 nat1 statis" then, worse, when i rem

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-17 Thread Aaron
Apparently, /27 is the smallest ip block you can use for cgnat pool (ASR9006 XR 5.3.1) service cgn cgn1 service-type nat44 nat1 inside-vrf six map outside-vrf one address-pool 193.193.193.0/32 when committing the above config, i get !!% 'cgn' detected the 'warning' condition 'Pref

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-16 Thread Aaron
: Re: [c-nsp] ASR9006 - CG NAT - VSM-500 Just a wild guess here, but I suspect you might be seeing the source port on your public IP, not the destination port in the CLI (despite the fact it calls it 'destination port'). kind regards Pshem On Thu, 17 Dec 2015 at 04:23 Aa

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-16 Thread Pshem Kowalczyk
Just a wild guess here, but I suspect you might be seeing the source port on your public IP, not the destination port in the CLI (despite the fact it calls it 'destination port'). kind regards Pshem On Thu, 17 Dec 2015 at 04:23 Aaron wrote: > Syslogging for CGNat is turning up some interesting

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-16 Thread Aaron
Syslogging for CGNat is turning up some interesting destination port numbers...I haven't been able to figure out the correlation. Please let me know if you understand how to convert what IOS XR shows, and what syslog shows... it seems that syslog is accurate and IOS XR is formatting the number

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-12-15 Thread Aaron
From: Pshem Kowalczyk [mailto:pshe...@gmail.com] Sent: Friday, November 06, 2015 3:18 PM To: Aaron; cisco-nsp@puck.nether.net; Aftab Siddiqui; quinn snyder Subject: Re: [c-nsp] ASR9006 - CG NAT - VSM-500 Hi, We use them inside our PEs (so it's MPLS in, MPLS out). The

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-11-06 Thread Pshem Kowalczyk
t; > > -Original Message- > From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of > Aaron > Sent: Thursday, November 05, 2015 9:28 PM > To: 'Pshem Kowalczyk'; cisco-nsp@puck.nether.net; 'Aftab Siddiqui' > Subject: Re: [c-nsp] ASR9006 -

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-11-06 Thread Aaron
o:pshe...@gmail.com] Sent: Thursday, November 05, 2015 7:58 PM To: Aaron; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ASR9006 - CG NAT - VSM-500 Hi, We use the previous non-virtualised cards (ISM-100) in our 9Ks. The experience has been generally positive. The configuration is quite simple and

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-11-05 Thread Aaron
, November 05, 2015 7:58 PM To: Aaron; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ASR9006 - CG NAT - VSM-500 Hi, We use the previous non-virtualised cards (ISM-100) in our 9Ks. The experience has been generally positive. The configuration is quite simple and the cards work well. Do spend some

Re: [c-nsp] ASR9006 - CG NAT - VSM-500

2015-11-05 Thread Pshem Kowalczyk
Hi, We use the previous non-virtualised cards (ISM-100) in our 9Ks. The experience has been generally positive. The configuration is quite simple and the cards work well. Do spend some time analysing various limitations of the card (pool sizes, throughput per ServiceApp pair, allowed bulk allocati

[c-nsp] ASR9006 - CG NAT - VSM-500

2015-11-05 Thread Aaron
Hi Group, I'm going to test Nat on my ASR9006 in my lab using the RSP440-TR and the VSM-500. Looking for any links to information or experience you all might have on how to get going on this. I'm looking for this to be implemented at my internet boundary ASR9k so I will test it like tha