autocommit fail : Total NAT DIPP exceed

Reply
L3 Networker

autocommit fail : Total NAT DIPP exceed

Hi all, I found the issue after upgrade Palo alto from PAN-OS 5.0-6.1.0  when to 6.1.0 auto-commit faile and show messages "Total NAT DIPP translated IP 804 exceeds the capacity of 800 " My model PA-5050 so, I would like to know this issue occur? 

Highlighted
Community Manager

Re: autocommit fail : Total NAT DIPP exceed

Hi

 

Are you sure your system is a PA-5050? The PA-5050 has a DIPP capacity for 2000 rules, the PA-5020 has a capacity of 800

anyway, this means you configured too many DIPP rules and need to combine/prune policies to come within the system's capacity

 

Please also upgrade to 6.1.19 at your earliest convenience as this is the recommended release for PAN-OS 6.1


Help the community: Like helpful comments and mark solutions
Reaper out
L3 Networker

Re: autocommit fail : Total NAT DIPP exceed

@reaperOhhh sorry Model Pa-5020 I would like to know whether this case autocommit fail 6.1.0 can upgrade to 6.1.19 from your recommend will not issue occur ?

Community Manager

Re: autocommit fail : Total NAT DIPP exceed

It will keep occuring until you adjust the configuration to fall below the maximum supported number of DIPP rules, unfortunately

 

This is a system limitation

 

upgrading to 6.1.19 just ensures you don't run into any other issues :)


Help the community: Like helpful comments and mark solutions
Reaper out
L3 Networker

Re: autocommit fail : Total NAT DIPP exceed

@reaper Thank you for advice to me 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!