Palo Alto Networks Knowledgebase: How to Change the NAT Oversubscription Rate

How to Change the NAT Oversubscription Rate

6338
Created On 02/08/19 00:00 AM - Last Updated 02/08/19 00:00 AM
Resolution

PAN-OS 6.1, 7.0

 

Details

Starting with PAN-OS 6.1, the NAT oversubscription rate is tunable. The NAT oversubscription rate is referring to the reusability of the translated IP and port. Reducing the oversubscription rate will decrease the number of source device translations, but will provide higher NAT rule capacities.

 

Steps

From the WebGUI:

Go to Device > Setup > Session > Session Settings as shown below:

Screen Shot 2015-01-14 at 2.29.04 PM.png

 

From the CLI, use the following command:

> configure

# set deviceconfig setting nat dipp-oversub

1x  No oversubscription

2x  2 times oversubscription

4x  4 times oversubscription

8x  8 times oversubscription

# commit



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClanCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language