How to Change the NAT Oversubscription Rate

Starting with PAN-OS 6.1, the NAT oversubscription rate is tunable. The NAT oversubscription rate is referring to the reusability of the translated IP and port. Reducing the oversubscription rate will decrease the number of source device translations, but will provide higher NAT rule capacities.

Steps

From the WebGUI:

Go to Device > Setup > Session > Session Settings as shown below:

From the CLI, use the following command:

> configure

# set deviceconfig setting nat dipp-oversub

1x  No oversubscription

2x  2 times oversubscription

4x  4 times oversubscription

8x  8 times oversubscription

# commit