Hi Guys,
I need some help to understand & fix a Lotus Notes replication failure but
not always. I suspect my PAT has some issues.
Lotus notes server on WAN side & clients on FastEthernet0/0 (user LAN).
I have this below NAT/PAT setup with overload (Port translation). I need to
fine tune timers involved in TCP port translation timers. The below output
of "sho ip nat translations verbose" shows timer of 24hrs.
1. Do I have to still use "ip nat translation port-timeout tcp 1352 xx" to
set the PAT (TCP port translation) timers?
2. Has anybody experience PAT issues with Lotus Notes? Any fix?
I also noticed two timeout values does not seems right.
!
interface serial0/0
 description --- To WAN provider
 ip address 10.30.1.1 255.255.255.252
 ip nat outside
!
interface  FastEthernet0/0
 description --- To User LAN
 ip address 10.10.2.1 255.255.255.0
 ip nat inside
!
ip nat inside source list NAT-ACL interface FastEthernet0/0 overload
!
ip access-list extended NAT-ACL
remark - Lotus Notes (tcp 1352)
permit tcp any gt 1023 any eq 1352
!
R3(config)#ip nat translation ?
  arp-ping-timeout        Specify timeout for WLAN-NAT ARP-Ping
  dns-timeout             Specify timeout for NAT DNS flows
  finrst-timeout          Specify timeout for NAT TCP flows after a FIN or
RST
  icmp-timeout            Specify timeout for NAT ICMP flows
  max-entries             Specify maximum number of NAT entries
  port-timeout            Specify timeout for NAT TCP/UDP port specific
flows
  pptp-timeout            Specify timeout for NAT PPTP flows
  routemap-entry-timeout  Specify timeout for routemap created half entry
  syn-timeout             Specify timeout for NAT TCP flows after a SYN and
no further
                          data
  tcp-timeout             Specify timeout for NAT TCP flows
  timeout                 Specify timeout for dynamic NAT translations
  udp-timeout             Specify timeout for NAT UDP flows
R3(config)# sho ip nat translations verbose
Pro Inside global      Inside local       Outside local      Outside global
tcp 10.10.2.1:1116 10.10.2.20:1116  10.50.2.1:1352  10.50.2.1:1352
    create 00:20:45, use 00:00:34 timeout:86400000, left 23:59:25,
Map-Id(In): 7,
    flags:
extended, use_count: 0, entry-id: 2009355, lc_entries: 0
tcp 10.10.2.1:1042 10.10.2.22:1988  10.50.2.1:1352  10.50.2.1:1352
    create 00:00:38, use 00:00:34 timeout:86400000, left 00:00:25,
Map-Id(In): 7,
    flags:
extended, timing-out, use_count: 0, entry-id: 2038456, lc_entries: 0
-- Thanks Mathew Blogs and organic groups at http://www.ccie.netReceived on Tue Sep 20 2011 - 17:48:47 ART
This archive was generated by hypermail 2.2.0 : Sat Oct 01 2011 - 07:26:25 ART