Cisco GRS Manuel utilisateur

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco

CRS Router, Release 5.2.x

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-32659-01

CONTENTS

Preface

Preface ix

Changes to This Document ix

Obtaining Documentation and Submitting a Service Request ix

CHAPTER 1

New and Changed Carrier Grade NAT Feature Information 1

New and Changed Carrier Grade NAT Features 1

CHAPTER 2

Implementing Carrier Grade NAT on Cisco IOS XR Software 3

Carrier Grade NAT Overview and Benefits 3

Carrier Grade NAT Overview 3

Benefits of Carrier Grade NAT 4

IPv4 Address Shortage 4

NAT and NAPT Overview 4

Network Address and Port Mapping 4

Translation Filtering 5

Prerequisites for Implementing the Carrier Grade NAT 5

CGSE PLIM 6

CGSE Multi-Chassis Support 7

CGSE Plus PLIM 7

Information About Carrier Grade NAT 7

Implementing NAT with ICMP 7

ICMP Query Session Timeout 7

Implementing NAT with TCP 8

Address and Port Mapping Behavior 8

Internally Initiated Connections 8

Externally Initiated Connections 8

Implementing NAT 44 over ISM 8

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 iii

Implementing NAT 64 over ISM 11

Double NAT 444 14

Address Family Translation 14

Cisco Carrier NAT Applications 14

IPv4/IPv6 Stateless Translator 14

IPv6 Rapid Deployment 15

Stateful NAT64 15

Dual Stack Lite 15

Port Control Protocol 16

Policy Functions 16

Application Level Gateway 16

FTP-ALG 16

RTSP-ALG 16

PPTP-ALG 17

TCP Maximum Segment Size Adjustment 17

Static Port Forwarding 17

1:1 Redundancy 18

Back-to-Back Deployment 18

Intelligent Port Management 18

Throughput Measurement 19

High Availability on the Data Path Service Virtual Interface (SVI) 20

External Logging 21

Netflow v9 Support 21

Syslog Support 21

Bulk Port Allocation 21

Destination-Based Logging 21

Implementing Carrier Grade NAT on Cisco IOS XR Software 22

Getting Started with the Carrier Grade NAT 22

Configuring the Service Role 22

Configuring the Service Instance and Location for the Carrier Grade NAT 23

Configuring the Service Virtual Interfaces 24

Configuring the Infrastructure Service Virtual Interface 24

Configuring the Application Service Virtual Interface 26

Configuring the Service Type Keyword Definition 27

Configuring an Inside and Outside Address Pool Map 28

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

iv OL-32659-01

Contents

Configuring the Policy Functions for the Carrier Grade NAT 30

Configuring Port Limit per Subscriber 30

Configuring the Timeout Value for the Protocol 32

Configuring the Timeout Value for the ICMP Protocol 32

Configuring the Timeout Value for the TCP Session 33

Configuring the Timeout Value for the UDP Session 35

Configuring the FTP ALG for NAT44 Instance 36

Configuring the RTSP ALG for NAT44 Instance 38

Configuring the PPTP ALG for a NAT44 Instance 39

Configuring the TCP Adjustment Value for the Maximum Segment Size 41

Configuring the Refresh Direction for the Network Address Translation 42

Configuring the Carrier Grade NAT for Static Port Forwarding 44

Configuring the Dynamic Port Ranges for NAT44 46

Configuring 1:1 Redundancy 47

Configuring Multiple Public Address Pools 48

Configuring Port Limit per VRF 50

Configuring Same Address Pool for Different NAT Instances 52

Configuring High Availability of Data Path Service Virtual Interface (SVI) 55

Configuring the Export and Logging for the Network Address Translation Table

Entries 57

Configuring the Server Address and Port for Netflow Logging 57

Configuring the Path Maximum Transmission Unit for Netflow Logging 59

Configuring the Refresh Rate for Netflow Logging 61

Configuring Session-Logging for a NAT44 or DS-Lite Instance 63

Configuring the Timeout for Netflow Logging 65

Configuring the Carrier Grade Service Engine 67

Bringing Up the CGSE Board 67

Configuring IPv4/IPv6 Stateless Translator (XLAT) 69

XLAT ServiceApp Configuration 69

XLAT Instance Configuration 70

Line Card Upgrade 71

UPGRADE FROM_ UBOOT to 559 & MANS FPGA to 0.41014 71

Configuring IPv6 Rapid Development 72

Ping to BR Anycast Address 75

Enable Additional 6rd Features 75

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 v

Contents

Configuring Dual Stack Lite Instance 77

Configuring PCP Server for NAT44 Instance 81

Configuring PCP Server for DS-Lite Instance 82

Configuration Examples for Implementing the Carrier Grade NAT 84

Configuring a Different Inside VRF Map to a Different Outside VRF: Example 84

Configuring a Different Inside VRF Map to a Same Outside VRF: Example 85

Configuring ACL for a Infrastructure Service Virtual Interface: Example 86

NAT44 Configuration: Example 86

NAT64 Stateless Configuration: Example 88

Predefined NAT Configuration: Example 89

DS Lite Configuration: Example 90

IPv6 ServiceApp and Static Route Configuration 90

IPv4 ServiceApp and Static Route Configuration 90

DS Lite Configuration 90

Bulk Port Allocation and Syslog Configuration: Example 91

PPTP ALG Configuration: Example 91

NAT44 Instance 91

DBL Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 91

PCP Server Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 92

Services Redundancy Configuation (Active/Standby): Example 92

Configuration of Multiple Address Pools: Example 92

Configuration of Port Limit per VRF: Example 92

Configuration of Same Public Address Pool across Different NAT Instances: Example 93

High Availability on data Path SVI: Example 93

CHAPTER 3

External Logging 95

Bulk Port Allocation 95

Restrictions for Bulk Port Allocation 95

Session logging 96

Syslog Logging 96

Restrictions for Syslog 96

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

vi OL-32659-01

Contents

Syslog Message Format 96

Header 97

Structured Data 98

MSG 98

Netflow v9 Support 100

NetFlow Record Format 100

Frequently Asked Questions (FAQs) 115

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 vii

Contents

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

viii OL-32659-01

Contents

Preface

The Preface contains these sections:

•Changes to This Document, page ix

•Obtaining Documentation and Submitting a Service Request, page ix

Changes to This Document

This table lists the technical changes made to this document since it was first released.

Table 1: Changes to This Document

Change SummaryDateRevision

Initial release of this document.July 2014OL-32659-01

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 ix

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

xOL-32659-01

Preface

Obtaining Documentation and Submitting a Service Request

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Cisco Routeur réseau

Cisco

Cisco 2691 Series Manuel utilisateur

Cisco

Cisco CGR2010 Guide de démarrage rapide

Cisco

Cisco 761M Manuel utilisateur

Cisco

Cisco Small Business RV220W Manuel utilisateur

Cisco

Cisco 1801 Manuel utilisateur

Cisco

Cisco 811 Comment utiliser

Cisco

Cisco ASR 5000 Manuel utilisateur

Cisco

Cisco WRT54G2 Linksys Manuel utilisateur

Cisco

Cisco IR829 Manuel

Cisco

Cisco 805 Series Manuel utilisateur

Cisco

Cisco SB 107 Manuel utilisateur

Cisco

Cisco IR1101 Manuel utilisateur

Cisco

Cisco 2611XM Manuel utilisateur

Cisco

Cisco 2911 Manuel utilisateur

Cisco

Cisco 2811 - Voice Security Bundle Router Manuel utilisateur

Cisco

Cisco 2524 - Router - EN Manuel utilisateur

Cisco

Cisco ASR 920 series Mode d’emploi

Cisco

Cisco SCE 1000 2xGBE Manuel de l'opérateur

Cisco

Cisco cBR Series Manuel

Cisco

Cisco 2524 - Router - EN Feuille d'instructions

Cisco

Cisco ASR 9000 Series Manuel utilisateur

Cisco

Cisco Universal Broadband Router Cisco uBR10012 Manuel utilisateur

Cisco

Cisco Cisco 887 Manuel utilisateur

Cisco

Cisco 890 Series Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

EnGenius

EnGenius ESR-9710 Manuel utilisateur

LevelOne

LevelOne FBR-1416 Manuel utilisateur

Dynacord

Dynacord Promatrix 6000 Manuel utilisateur

Lorex

Lorex F5D8230-4 Manuel utilisateur