Stateful NAT64 Table Size

[Duplem]

Hi there,

Here comes the time to design my first NAT64 solution !

I have read few documents from Palo Alto, but can't get one simple information...

Could anyone tell me the NAT64 table size for PA5060 ?

Best Regards,

Emmanuel

[pankaku]

Check the command

show system state | match nat

https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/networking/nat.html

[Duplem]

Hello,

Thank you for your interet on my post.

However I can't find the answer with your command, because I'm looking for a system table maximum size and not for a policy number information :

xxxx(active)> show system state | match nat
cfg.general.max-di-nat-policy-rule: 8000
cfg.general.max-dip-nat-policy-rule: 450
cfg.general.max-nat-policy-rule: 8000
cfg.general.max-si-nat-policy-rule: 8000
cfg.general.max-signature: 6000
cfg.general.max-threat-signature: 3000
<output suppressed>

cfg.nat.max-range-per-ip: 8
peer.cfg.general.max-di-nat-policy-rule: 8000
peer.cfg.general.max-dip-nat-policy-rule: 450
peer.cfg.general.max-nat-policy-rule: 8000
peer.cfg.general.max-si-nat-policy-rule: 8000
peer.cfg.general.max-signature: 6000
peer.cfg.general.max-threat-signature: 3000
<output suppressed>

peer.cfg.nat.max-range-per-ip: 8
peer.sw.mprelay.s1.cp.nat_rpt: 0x0
peer.sw.mprelay.s1.dp0.nat_rpt: 0x1
peer.sw.mprelay.s1.dp1.nat_rpt: 0x1
peer.sw.mprelay.s1.dp2.nat_rpt: 0x1
sw.mprelay.s1.cp.nat_rpt: 0x0
sw.mprelay.s1.dp0.nat_rpt: 0x1
sw.mprelay.s1.dp1.nat_rpt: 0x1
sw.mprelay.s1.dp2.nat_rpt: 0x1

Could anybody help ?

Best Regards

Emmanuel

[pankaku]

Hi Emmanuel,

Have you checked the document that I have attched in the previous comment?

Regards,

Pankaj  Kumar

[Duplem]

Hi Pankaj,

I checked your link and cannot get the information I need.

The link is great for capacity planning or monitoring, but not to design a solution.

Rule Used Available
-------------------------------- ---------- ----------
NAT 0 516096

So this rule could use 516096MB of memory, fine... but what is the memory usage of a NAT 64 session ? 

That's why I talked about table size and not memory pool.

Your answer is a brick on the wall, but I need the second part now 🙂

Or only an answer about the theorical maximum number of simultaneous NAT64 sessions running over a PA5060.

Don't hesitate to explain your answer if I misunderstood.

Best Regards,

Emmanuel