Y are you using a server iron as a NAT box? unless you're doing some sort of load balancing as well w/ the hosts being Nat'd.
I'd say you'd do better just getting some old P3/4/ amd k6/7 and installing Free BSD using ipfw or install linux and use iptables. it's a lot cheaper, and a lot faster/better for internet gateway nat. IF you're doing load balancing and the hosts behind are on private nets then you can confiure source-nat on the reals and accomplish what you need as well. It really just depends on what you're trying to accomplish, but as much as I love the SI platform, I would not recommend using it for anything other then Server Load Balancing. On Mon, August 7, 2006 21:12, Ram?n Alvarez Rayo wrote: > Hello, > > I made some changes in my topology to avoid some equipments, actually I > have > the server iron connected directly to my Internet gateway. In order to > troubleshoot the nat configuration but I found the mac-address on my > outside > interface is: > > telnet at NAT_CENTRAL#show int eth 16 > FastEthernet16 is up > Hardware is FastEthernet, address is 0004.8065.3b84 (bia 0004.8065.3b84) > > But in the network it registered with another mac-addres, > > Internet 200.62.80.2 0 0204.8065.3b75 ARPA > FastEthernet0/1 > > And i want to known if this is normal, because i look for this layer 2 > address on every interface but i didn't find. Is it the cause of the delay > on nat Translations ? > > > > > -----Mensaje original----- > De: Tom Samplonius [mailto:tom at uniserve.com] > Enviado el: Lunes, 07 de Agosto de 2006 12:14 p.m. > Para: Ram?n Alvarez Rayo > CC: 'Ryan DeBerry'; foundry-nsp at puck.nether.net > Asunto: Re: [f-nsp] Problem with NAT Foundry Server Iron XL > > > Ramon, > > I find that the XLs are not very tolerant of misconfigurations, and > when > there > are problems, they just perform inconsistantly like this, rather than > logging > any errors. So I would look for any duplicate IPs, or duplex mismatches, > plus > any errors on the XL ports, plus any switches/routers that the XL is > connected > to. > > > Tom > > > On Mon, 7 Aug 2006, [iso-8859-1] Ramsn Alvarez Rayo wrote: > >> Yes, the cisco 3845 has to much cpu use and memory. Now with the server > iron >> xl why is this variable performance? The entire session is slow and the >> after finished and wait 10 minutes I start a new one and this is very > fast? >> >> >> >> _____ >> >> De: Ryan DeBerry [mailto:rdeberry at gmail.com] >> Enviado el: Lunes, 07 de Agosto de 2006 12:00 p.m. >> Para: Ramsn Alvarez Rayo >> CC: foundry-nsp at puck.nether.net >> Asunto: Re: [f-nsp] Problem with NAT Foundry Server Iron XL >> >> >> >> The Server Iron is purpose built for SLB or Server Load Balancing. Are > you >> replacing this due to performance issues? >> >> On 8/7/06, Ramsn Alvarez Rayo < ramon.alvarez at alfanumeric.com.ni> wrote: >> >> We recently received a Server Iron Switch (16 10/100 + 2 Geth), i > configured >> this switch to do NAT for our networks, but we are experimenting service >> instablility when we use as gateway the Server iron, some times is very > show >> and then few moments later is very fast. We want to replace a Cisco 3845 >> that is doing NAT translation with this equipment but we can't move to >> production this equipment. >> >> >> >> The Software version is 07.5.00T12, and the config related to nat is the >> following, actually we have only nat in this equipment. I tried to >> setup >> the timeout for nat session and we don't get any changes. >> >> >> >> What could be cause this issue ? >> >> >> >> vlan 200 name RED_PUBLICA by port >> >> untagged ethe 16 >> >> router-interface ve 1 >> >> ! >> >> vlan 199 name RED_PRIVADA by port >> >> untagged ethe 15 >> >> router-interface ve 2 >> >> ! >> >> ip nat inside >> >> ip nat inside source list 10 pool NAT1 overload >> >> ip nat pool NAT1 200.62.80.3 200.62.80.4 prefix-len 29 >> >> ip default-gateway 200.62.80.1 >> >> ip dns domain-name alfanumeric.com.ni >> >> ip dns server-address 200.62.65.1 >> >> >> >> interface e 15 >> >> speed-duplex 100-full >> >> ! >> >> interface e 16 >> >> speed-duplex 100-full >> >> ! >> >> >> >> interface ve 1 >> >> ip address 200.62.80.2 255.255.255.248 >> >> ! >> >> interface ve 2 >> >> ip address 192.168.4.254 255.255.255.0 >> >> ! >> >> >> >> access-list 10 permit 192.168.4.0 0.0.0.255 >> >> ! >> >> >> _______________________________________________ >> foundry-nsp mailing list >> foundry-nsp at puck.nether.net >> http://puck.nether.net/mailman/listinfo/foundry-nsp >> >> >> >> >> >> > > > _______________________________________________ > foundry-nsp mailing list > foundry-nsp at puck.nether.net > http://puck.nether.net/mailman/listinfo/foundry-nsp > -- Jamie Dahl "Thousands of tired, nerve-shaken, over-civilized people are beginning to find out that going to the mountains is going home; that wilderness is a necessity; and that mountain parks and reservations are useful not only as fountains of timber and irrigating rivers, but as fountains of life." --John Muir
