This is official, we have almost reached the capacity of our public IP addresses (20,000 just on Wireless) We love IPv6, but for the moment it's not going to solve our issue!
So, NAT it is, and we have zero experience besides our visitor network that handles 1000+ users. Our plan is to terminate NAT on our Fortinet firewalls, and assign 32 VLANs (in our Aruba VLAN pools) with a private /21 in each subnet. So ~64,000 IP addresses. We block mDNS etc... no worries there. We can now move away from the 30 minutes lease time and go to... I was thinking 12 or 14 hours. We plan to do NAT-PAT 1 public to 8 private IP ratio or 1 to 16. People with similar size networks: Anything to worry about? DHCP capacity, NAT capacity, Logs, ... Thank you in advance for your input, Philippe Hanset Univ. of TN, Knoxville www.eduroamus.org ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
