Cisco GRS Manuale utente

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco

CRS Router, Release 5.2.x

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-32659-01

CONTENTS

Preface

Preface ix

Changes to This Document ix

Obtaining Documentation and Submitting a Service Request ix

CHAPTER 1

New and Changed Carrier Grade NAT Feature Information 1

New and Changed Carrier Grade NAT Features 1

CHAPTER 2

Implementing Carrier Grade NAT on Cisco IOS XR Software 3

Carrier Grade NAT Overview and Benefits 3

Carrier Grade NAT Overview 3

Benefits of Carrier Grade NAT 4

IPv4 Address Shortage 4

NAT and NAPT Overview 4

Network Address and Port Mapping 4

Translation Filtering 5

Prerequisites for Implementing the Carrier Grade NAT 5

CGSE PLIM 6

CGSE Multi-Chassis Support 7

CGSE Plus PLIM 7

Information About Carrier Grade NAT 7

Implementing NAT with ICMP 7

ICMP Query Session Timeout 7

Implementing NAT with TCP 8

Address and Port Mapping Behavior 8

Internally Initiated Connections 8

Externally Initiated Connections 8

Implementing NAT 44 over ISM 8

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 iii

Implementing NAT 64 over ISM 11

Double NAT 444 14

Address Family Translation 14

Cisco Carrier NAT Applications 14

IPv4/IPv6 Stateless Translator 14

IPv6 Rapid Deployment 15

Stateful NAT64 15

Dual Stack Lite 15

Port Control Protocol 16

Policy Functions 16

Application Level Gateway 16

FTP-ALG 16

RTSP-ALG 16

PPTP-ALG 17

TCP Maximum Segment Size Adjustment 17

Static Port Forwarding 17

1:1 Redundancy 18

Back-to-Back Deployment 18

Intelligent Port Management 18

Throughput Measurement 19

High Availability on the Data Path Service Virtual Interface (SVI) 20

External Logging 21

Netflow v9 Support 21

Syslog Support 21

Bulk Port Allocation 21

Destination-Based Logging 21

Implementing Carrier Grade NAT on Cisco IOS XR Software 22

Getting Started with the Carrier Grade NAT 22

Configuring the Service Role 22

Configuring the Service Instance and Location for the Carrier Grade NAT 23

Configuring the Service Virtual Interfaces 24

Configuring the Infrastructure Service Virtual Interface 24

Configuring the Application Service Virtual Interface 26

Configuring the Service Type Keyword Definition 27

Configuring an Inside and Outside Address Pool Map 28

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

iv OL-32659-01

Contents

Configuring the Policy Functions for the Carrier Grade NAT 30

Configuring Port Limit per Subscriber 30

Configuring the Timeout Value for the Protocol 32

Configuring the Timeout Value for the ICMP Protocol 32

Configuring the Timeout Value for the TCP Session 33

Configuring the Timeout Value for the UDP Session 35

Configuring the FTP ALG for NAT44 Instance 36

Configuring the RTSP ALG for NAT44 Instance 38

Configuring the PPTP ALG for a NAT44 Instance 39

Configuring the TCP Adjustment Value for the Maximum Segment Size 41

Configuring the Refresh Direction for the Network Address Translation 42

Configuring the Carrier Grade NAT for Static Port Forwarding 44

Configuring the Dynamic Port Ranges for NAT44 46

Configuring 1:1 Redundancy 47

Configuring Multiple Public Address Pools 48

Configuring Port Limit per VRF 50

Configuring Same Address Pool for Different NAT Instances 52

Configuring High Availability of Data Path Service Virtual Interface (SVI) 55

Configuring the Export and Logging for the Network Address Translation Table

Entries 57

Configuring the Server Address and Port for Netflow Logging 57

Configuring the Path Maximum Transmission Unit for Netflow Logging 59

Configuring the Refresh Rate for Netflow Logging 61

Configuring Session-Logging for a NAT44 or DS-Lite Instance 63

Configuring the Timeout for Netflow Logging 65

Configuring the Carrier Grade Service Engine 67

Bringing Up the CGSE Board 67

Configuring IPv4/IPv6 Stateless Translator (XLAT) 69

XLAT ServiceApp Configuration 69

XLAT Instance Configuration 70

Line Card Upgrade 71

UPGRADE FROM_ UBOOT to 559 & MANS FPGA to 0.41014 71

Configuring IPv6 Rapid Development 72

Ping to BR Anycast Address 75

Enable Additional 6rd Features 75

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 v

Contents

Configuring Dual Stack Lite Instance 77

Configuring PCP Server for NAT44 Instance 81

Configuring PCP Server for DS-Lite Instance 82

Configuration Examples for Implementing the Carrier Grade NAT 84

Configuring a Different Inside VRF Map to a Different Outside VRF: Example 84

Configuring a Different Inside VRF Map to a Same Outside VRF: Example 85

Configuring ACL for a Infrastructure Service Virtual Interface: Example 86

NAT44 Configuration: Example 86

NAT64 Stateless Configuration: Example 88

Predefined NAT Configuration: Example 89

DS Lite Configuration: Example 90

IPv6 ServiceApp and Static Route Configuration 90

IPv4 ServiceApp and Static Route Configuration 90

DS Lite Configuration 90

Bulk Port Allocation and Syslog Configuration: Example 91

PPTP ALG Configuration: Example 91

NAT44 Instance 91

DBL Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 91

PCP Server Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 92

Services Redundancy Configuation (Active/Standby): Example 92

Configuration of Multiple Address Pools: Example 92

Configuration of Port Limit per VRF: Example 92

Configuration of Same Public Address Pool across Different NAT Instances: Example 93

High Availability on data Path SVI: Example 93

CHAPTER 3

External Logging 95

Bulk Port Allocation 95

Restrictions for Bulk Port Allocation 95

Session logging 96

Syslog Logging 96

Restrictions for Syslog 96

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

vi OL-32659-01

Contents

Syslog Message Format 96

Header 97

Structured Data 98

MSG 98

Netflow v9 Support 100

NetFlow Record Format 100

Frequently Asked Questions (FAQs) 115

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 vii

Contents

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

viii OL-32659-01

Contents

Preface

The Preface contains these sections:

•Changes to This Document, page ix

•Obtaining Documentation and Submitting a Service Request, page ix

Changes to This Document

This table lists the technical changes made to this document since it was first released.

Table 1: Changes to This Document

Change SummaryDateRevision

Initial release of this document.July 2014OL-32659-01

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 ix

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

xOL-32659-01

Preface

Obtaining Documentation and Submitting a Service Request

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Cisco Router di rete

Cisco

Cisco Catalyst 4500 Series Manuale utente

Cisco

Cisco 800 Series Manuale

Cisco

Cisco CRS Series Manuale utente

Cisco

Cisco Linksys RAN201 Manuale utente

Cisco

Cisco RV016 - Small Business - 10/100 VPN Router Manuale utente

Cisco

Cisco ASR 9901 Manuale utente

Cisco

Cisco WIC-1ENET - 1700 Access Routers 1port10bt Enet Wan... Manuale utente

Cisco

Cisco Unified Communications Manager 8.5(1) Manuale utente

Cisco

Cisco 2600 Series Manuale utente

Cisco

Cisco ASR 900 Series Manuale utente

Cisco

Cisco RV180 Manuale utente

Cisco

Cisco 8800 Series Manuale

Cisco

Cisco 3700 - 32 To 128MB Manuale

Cisco

Cisco 12010 series Manuale utente

Cisco

Cisco ME 4924-10GE Istruzioni originali

Cisco

Cisco ASR 5000 Series Manuale di istruzioni

Cisco

Cisco ASR 903 Istruzioni operative

Cisco

Cisco 7513 Series Manuale utente

Cisco

Cisco 1800 Series Istruzioni originali

Cisco

Cisco 678 Istruzioni operative

Cisco

Cisco ASR 1000 Series Manuale utente

Cisco

Cisco CRM3 Manuale di istruzioni

Cisco

Cisco PRP-1= Manuale dell'operatore

Cisco

Cisco 1921-T1SEC/K9 Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

EnGenius

EnGenius ESR-9710 Manuale utente

LevelOne

LevelOne FBR-1416 Manuale utente

Dynacord

Dynacord Promatrix 6000 Manuale utente

Lorex

Lorex F5D8230-4 Manuale utente