Stateful NAT64 Table Size

Showing results for 
Search instead for 
Did you mean: 

Stateful NAT64 Table Size

L2 Linker

Hi there,


Here comes the time to design my first NAT64 solution !

I have read few documents from Palo Alto, but can't get one simple information...


Could anyone tell me the NAT64 table size for PA5060 ?


Best Regards,




L5 Sessionator



Thank you for your interet on my post.

However I can't find the answer with your command, because I'm looking for a system table maximum size and not for a policy number information :


xxxx(active)> show system state | match nat
cfg.general.max-di-nat-policy-rule: 8000
cfg.general.max-dip-nat-policy-rule: 450
cfg.general.max-nat-policy-rule: 8000
cfg.general.max-si-nat-policy-rule: 8000
cfg.general.max-signature: 6000
cfg.general.max-threat-signature: 3000
<output suppressed>

cfg.nat.max-range-per-ip: 8
peer.cfg.general.max-di-nat-policy-rule: 8000
peer.cfg.general.max-dip-nat-policy-rule: 450
peer.cfg.general.max-nat-policy-rule: 8000
peer.cfg.general.max-si-nat-policy-rule: 8000
peer.cfg.general.max-signature: 6000
peer.cfg.general.max-threat-signature: 3000
<output suppressed>

peer.cfg.nat.max-range-per-ip: 8
peer.sw.mprelay.s1.cp.nat_rpt: 0x0
peer.sw.mprelay.s1.dp0.nat_rpt: 0x1
peer.sw.mprelay.s1.dp1.nat_rpt: 0x1
peer.sw.mprelay.s1.dp2.nat_rpt: 0x1
sw.mprelay.s1.cp.nat_rpt: 0x0
sw.mprelay.s1.dp0.nat_rpt: 0x1
sw.mprelay.s1.dp1.nat_rpt: 0x1
sw.mprelay.s1.dp2.nat_rpt: 0x1


Could anybody help ?


Best Regards



Hi Emmanuel,


Have you checked the document that I have attched in the previous comment?



Pankaj  Kumar

Hi Pankaj,


I checked your link and cannot get the information I need.

The link is great for capacity planning or monitoring, but not to design a solution.


Rule Used Available
-------------------------------- ---------- ----------
NAT 0 516096


So this rule could use 516096MB of memory, fine... but what is the memory usage of a NAT 64 session ? 

That's why I talked about table size and not memory pool.


Your answer is a brick on the wall, but I need the second part now 🙂

Or only an answer about the theorical maximum number of simultaneous NAT64 sessions running over a PA5060.


Don't hesitate to explain your answer if I misunderstood.


Best Regards,



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!