Technical data

120 ServerIron ADX NAT64 Configuration Guide

53-1002444-02

Deleting IP NAT sticky sessions

DRAFT: BROCADE CONFIDENTIAL

Syntax: [no] ip nat disable-sticky

Deleting IP NAT sticky sessions

By default, when a dynamic IP NAT client initiates traffic, the ServerIron ADX selects a NAT pool IP

and creates a sticky session, which associates this client's IP with the same NAT pool IP. For all

subsequent flows from the client, the same NAT pool IP is selected as long as the sticky session

exists.

However, under certain heavy traffic conditions, the NAT pool IP might run out of ports, resulting in

dropped connections. Enter the server nat-sticky-delete command to override this behavior:

ServerIronADX(config)# server nat-sticky-delete

Syntax: [no] server nat-sticky-delete

If a new client connection request arrives and the NAT pool IP address in a sticky session has run

out of available ports, the ServerIron ADX (if configured with the server nat-sticky-delete command)

will delete the existing sticky session, select a new NAT pool IP, and create a new sticky session for

the source IP-NAT pool IP pair. Any existing session with this client will continue to exist, however, all

new connections will use the new sticky session.

If the server nat-sticky-delete command is not configured, the ServerIron ADX will generate a port

unreachable ICMP message.

Stateless static IP NAT

The ServerIron ADX creates sessions for static NAT traffic by default. You can disable this behavior

using the following command.

ServerIronADX(config)# ip nat stateless

Syntax: [no] ip nat stateless

For the ip nat stateless command to work, the ip nat inside source static command must already

be configured.

ServerIronADX(config)# ip nat inside source static 10.45.16.103 157.29.56.3

ServerIronADX(config)# ip nat stateless

NOTE

IP NAT stateless only supports TCP, UDP, and ICMP traffic. FTP, RTSP, and other similar complex

protocols are not currently supported.

NOTE

You must reload the ServerIron ADX whenever changes are made to a running IP NAT configuration.