Thanks Pshem, but then what would this be ?

 

Outside Address     : 123.234.123.49
Outside Port        : 6437



 

Aaron

 

From: Pshem Kowalczyk [mailto:[email protected]] 
Sent: Wednesday, December 16, 2015 2:11 PM
To: Aaron; [email protected]; Aftab Siddiqui; quinn snyder
Subject: Re: [c-nsp] ASR9006 - CG NAT - VSM-500

 

Just a wild guess here, but I suspect you might be seeing the source port on 
your public IP, not the destination port in the CLI (despite the fact it calls 
it 'destination port').

 

kind regards

Pshem

 

 

On Thu, 17 Dec 2015 at 04:23 Aaron <[email protected]> wrote:

Syslogging for CGNat is turning up some interesting destination port 
numbers...I haven't been able to figure out the correlation.  Please let me 
know if you understand how to convert what IOS XR shows, and what syslog 
shows...  it seems that syslog is accurate and IOS XR is formatting the number 
strangely.  2 examples comparing syslog trap to ios xr output shown below.  
Everything seems to match EXCEPT that destination port number.

Aaron

**************************************************************************************
EXAMPLE 1 - i'm tring to figure out how destination port 23 somehow is shown as 
5888
**************************************************************************************

Syslog trap...

1 2015 Dec 16 14:48:28 - - NAT44 - [SessionbasedAD 6 10.144.0.11 six - 
123.234.123.49 49289 6437 - 66.195.95.174 23 ]

IOS XR...

RP/0/RSP0/CPU0:eng-lab-9k-1#sh cgn nat44 nat1 session protocol tcp inside-vrf 
six inside-address 10.144.0.11 port 49289
Wed Dec 16 08:49:09.010 CST
------------------------------------------------------
NAT44 instance : nat1
------------------------------------------------------
Outside Address     : 123.234.123.49
Outside Port        : 6437
Translation Type    : dynamic
Protocol            : tcp
------------------------------------------------------
  Destination Address       Destination Port
------------------------------------------------------
  66.195.95.174             5888

**************************************************************************************
EXAMPLE 2 - i'm tring to figure out how destination port 80 somehow is shown as 
20480
**************************************************************************************

Syslog trap...

1 2015 Dec 16 14:48:39 - - NAT44 - [SessionbasedAD 6 10.144.0.11 six - 
123.234.123.49 49290 19520 - 74.125.138.155 80 ]


IOS XR...

RP/0/RSP0/CPU0:eng-lab-9k-1#sh cgn nat44 nat1 session protocol tcp inside-vrf 
six inside-address 10.144.0.11 port 49290
Wed Dec 16 09:19:38.434 CST
------------------------------------------------------
NAT44 instance : nat1
------------------------------------------------------
Outside Address     : 123.234.123.49
Outside Port        : 19520
Translation Type    : dynamic
Protocol            : tcp
------------------------------------------------------
  Destination Address       Destination Port
------------------------------------------------------
  74.125.138.155            20480
RP/0/RSP0/CPU0:eng-lab-9k-1#


Aaron



_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to