Hi, Yes you should be able to use the command on v20.05 vpp build. I don't think the Out of ports error is timeout related. I would check mapping configurations.
nat44 deterministic add in <addr>/<plen> out <addr>/<plen> Best regards, Filip Varga From: [email protected] <[email protected]> Sent: Tuesday, April 6, 2021 2:16 PM To: Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco) <[email protected]>; [email protected] Subject: RES: [vpp-dev] TCP timeout Importance: High Hello Filip, thats great to know about this update . Do you mind telling me if am I able to change this timeouts values in 20.05 using the following sintax: set nat timeout udp 300 tcp-established 900 tcp-transitory 240 icmp 90 ? Another point is I'm getting the "out of ports" error in the output of show error command. I suspect that is because of the default timeout value is too large . Do you have any thoughts about how can I work this out? Best Regards De: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Em nome de Filip Varga via lists.fd.io Enviada em: terça-feira, 6 de abril de 2021 08:00 Para: Marcos - Mgiga <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]> Assunto: Re: [vpp-dev] TCP timeout Hello Marcos, I am currently working on updating docs for all NAT plugins. These docs & introduction should be than located in the appropriate plugin directory in markdown file. The wiki docs is outdated. To use DET44 nat (it is a separate plugin now) you would have to first enable the plugin and then set the timeout. For example like this: det44 plugin enable set interface det44 inside <> outside <> set det44 timeouts udp <sec> tcp established <sec> tcp transitory <sec> icmp <sec> det44 add in <addr>/<plen> out <addr>/<plen> * to add maps Best regards, Filip Varga From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> On Behalf Of Marcos - Mgiga Sent: Monday, April 5, 2021 9:56 PM To: [email protected]<mailto:[email protected]> Subject: [vpp-dev] TCP timeout Hello VPP experts, I would like to set a certain timeout value for TCP established connections. According to VPP Wiki ( https://wiki.fd.io/view/VPP/NAT) in deterministic mode, that would be achieved by using the following sintax: set nat44 deterministic timeout [udp <sec> | tcp-established <sec> | tcp-transitory <sec> | icmp <sec> | reset] In my enviroment ( Using VPP 20.05) I just was able to change that value using : set nat timeout udp 300 tcp-established 900 tcp-transitory 240 icmp 90. I would like to confirm is this behavior is correct. Best Regards Marcos
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19110): https://lists.fd.io/g/vpp-dev/message/19110 Mute This Topic: https://lists.fd.io/mt/81873610/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
