OpenForum RSS: ASA 5540

ASA 5540 (mrustik)

Wed, 28 Oct 2009 14:01:24 GMT

�� , �� global (out) 1 interface, � �� .
�� , � �� , �� . ��
Dynamic NAT has these disadvantages:
• If the mapped pool has fewer addresses than the real group, you could run out of addresses if the
amount of traffic is more than expected.
Use PAT if this event occurs often because PAT provides over 64,000 translations using ports of a
single address.
� �� , � �� .

ASA 5540 (mrustik)

Tue, 27 Oct 2009 09:06:10 GMT

>�.�. �� sh xla cou ��
>248 in use, 248 most used ?

��.

ASA 5540 (Myxa)

Tue, 27 Oct 2009 08:19:20 GMT

�.�. �� sh xla cou ��
248 in use, 248 most used ?

ASA 5540 (mrustik)

Tue, 27 Oct 2009 06:55:45 GMT

nat control ��, 248 �� , 249 � �� , � �� nat sh xlate �� 248 ��, �� . �� , �� -�� .
�� NAT
global (out) 1 xxx.yyy.92.0-xxx.yyy.92.255
nat (LocNet) 1 10.16.0.0 255.255.0.0 tcp 350 350 udp 350
nat (LocNet) 1 10.17.0.0 255.255.0.0 tcp 350 350 udp 350

ASA 5540 (Myxa)

Tue, 27 Oct 2009 06:46:16 GMT

>�� !
>�� NAT �� , �� , ��
>�� NAT �� 248.
>�� Cisco Adaptive Security Appliance Software Version 8.2(1)
>Device Manager Version 6.2(1)
>This platform has an ASA 5540 VPN Premium license
>�� cisco �� , �� , ��
>�� ?

�� . � nat-control ��?