Changing the NAT table size on NG

[BarryStiefel]

Changing the NAT table size on NG



Contributed by MattH
Published in geeklog Monday, October 13 2003 @ 06:34 AM EST

If you are receiving the following log entry "NAT Hide Failure - there are currently no available ports for hide operation" it can indicate that the NAT table is too small to support the number of concurrent NAT'd connections. To increase the size of the table you need to edit your objects_5_0.C which is in the conf directory.

Note: You need to stop the management daemon as it holds the objects.C file in memory.

Edit the file and change the following lines

:nat_limit (X)

and

:nat_hashsize (Y)

X is the number of connections to support (default is 25000), and Y is a number which is a power of two and is "close" to X (default 16384).

Example



:nat_limit (50000)
:nat_hashsize (65536)

gives a NAT table size of 50000 connections. Once the changes have been made, restart the daemon and push the policy.

-- RayLodato - 14 Jan 2004

FAQForm FAQs.Class: FAQs.OS: FAQs.Version: