topic Re: Stateful NAT64 Table Size in General Topics

Stateful NAT64 Table Size

Duplem — Tue, 01 Sep 2015 14:08:41 GMT

Hi there,

Here comes the time to design my first NAT64 solution !

I have read few documents from Palo Alto, but can't get one simple information...

Could anyone tell me the NAT64 table size for PA5060 ?

Best Regards,

Emmanuel

Re: Stateful NAT64 Table Size

pankaku — Tue, 01 Sep 2015 16:55:23 GMT

Check the command

show system state | match nat

https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/networking/nat.html

Re: Stateful NAT64 Table Size

Duplem — Wed, 02 Sep 2015 09:23:54 GMT

Hello,

Thank you for your interet on my post.

However I can't find the answer with your command, because I'm looking for a system table maximum size and not for a policy number information :

xxxx(active)> show system state | match nat
cfg.general.max-di-nat-policy-rule: 8000
cfg.general.max-dip-nat-policy-rule: 450
cfg.general.max-nat-policy-rule: 8000
cfg.general.max-si-nat-policy-rule: 8000
cfg.general.max-signature: 6000
cfg.general.max-threat-signature: 3000
<output suppressed>

cfg.nat.max-range-per-ip: 8
peer.cfg.general.max-di-nat-policy-rule: 8000
peer.cfg.general.max-dip-nat-policy-rule: 450
peer.cfg.general.max-nat-policy-rule: 8000
peer.cfg.general.max-si-nat-policy-rule: 8000
peer.cfg.general.max-signature: 6000
peer.cfg.general.max-threat-signature: 3000
<output suppressed>

peer.cfg.nat.max-range-per-ip: 8
peer.sw.mprelay.s1.cp.nat_rpt: 0x0
peer.sw.mprelay.s1.dp0.nat_rpt: 0x1
peer.sw.mprelay.s1.dp1.nat_rpt: 0x1
peer.sw.mprelay.s1.dp2.nat_rpt: 0x1
sw.mprelay.s1.cp.nat_rpt: 0x0
sw.mprelay.s1.dp0.nat_rpt: 0x1
sw.mprelay.s1.dp1.nat_rpt: 0x1
sw.mprelay.s1.dp2.nat_rpt: 0x1

Could anybody help ?

Best Regards

Emmanuel

Re: Stateful NAT64 Table Size

pankaku — Wed, 02 Sep 2015 12:24:56 GMT

Hi Emmanuel,

Have you checked the document that I have attched in the previous comment?

Regards,

Pankaj Kumar

Re: Stateful NAT64 Table Size

Duplem — Wed, 02 Sep 2015 13:15:33 GMT

Hi Pankaj,

I checked your link and cannot get the information I need.

The link is great for capacity planning or monitoring, but not to design a solution.

Rule Used Available
-------------------------------- ---------- ----------
NAT 0 516096

So this rule could use 516096MB of memory, fine... but what is the memory usage of a NAT 64 session ?

That's why I talked about table size and not memory pool.

Your answer is a brick on the wall, but I need the second part now 🙂

Or only an answer about the theorical maximum number of simultaneous NAT64 sessions running over a PA5060.

Don't hesitate to explain your answer if I misunderstood.

Best Regards,

Emmanuel