Cisco GRS Bedienungsanleitung

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco

CRS Router, Release 5.2.x

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-32659-01

CONTENTS

Preface

Preface ix

Changes to This Document ix

Obtaining Documentation and Submitting a Service Request ix

CHAPTER 1

New and Changed Carrier Grade NAT Feature Information 1

New and Changed Carrier Grade NAT Features 1

CHAPTER 2

Implementing Carrier Grade NAT on Cisco IOS XR Software 3

Carrier Grade NAT Overview and Benefits 3

Carrier Grade NAT Overview 3

Benefits of Carrier Grade NAT 4

IPv4 Address Shortage 4

NAT and NAPT Overview 4

Network Address and Port Mapping 4

Translation Filtering 5

Prerequisites for Implementing the Carrier Grade NAT 5

CGSE PLIM 6

CGSE Multi-Chassis Support 7

CGSE Plus PLIM 7

Information About Carrier Grade NAT 7

Implementing NAT with ICMP 7

ICMP Query Session Timeout 7

Implementing NAT with TCP 8

Address and Port Mapping Behavior 8

Internally Initiated Connections 8

Externally Initiated Connections 8

Implementing NAT 44 over ISM 8

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 iii

Implementing NAT 64 over ISM 11

Double NAT 444 14

Address Family Translation 14

Cisco Carrier NAT Applications 14

IPv4/IPv6 Stateless Translator 14

IPv6 Rapid Deployment 15

Stateful NAT64 15

Dual Stack Lite 15

Port Control Protocol 16

Policy Functions 16

Application Level Gateway 16

FTP-ALG 16

RTSP-ALG 16

PPTP-ALG 17

TCP Maximum Segment Size Adjustment 17

Static Port Forwarding 17

1:1 Redundancy 18

Back-to-Back Deployment 18

Intelligent Port Management 18

Throughput Measurement 19

High Availability on the Data Path Service Virtual Interface (SVI) 20

External Logging 21

Netflow v9 Support 21

Syslog Support 21

Bulk Port Allocation 21

Destination-Based Logging 21

Implementing Carrier Grade NAT on Cisco IOS XR Software 22

Getting Started with the Carrier Grade NAT 22

Configuring the Service Role 22

Configuring the Service Instance and Location for the Carrier Grade NAT 23

Configuring the Service Virtual Interfaces 24

Configuring the Infrastructure Service Virtual Interface 24

Configuring the Application Service Virtual Interface 26

Configuring the Service Type Keyword Definition 27

Configuring an Inside and Outside Address Pool Map 28

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

iv OL-32659-01

Contents

Configuring the Policy Functions for the Carrier Grade NAT 30

Configuring Port Limit per Subscriber 30

Configuring the Timeout Value for the Protocol 32

Configuring the Timeout Value for the ICMP Protocol 32

Configuring the Timeout Value for the TCP Session 33

Configuring the Timeout Value for the UDP Session 35

Configuring the FTP ALG for NAT44 Instance 36

Configuring the RTSP ALG for NAT44 Instance 38

Configuring the PPTP ALG for a NAT44 Instance 39

Configuring the TCP Adjustment Value for the Maximum Segment Size 41

Configuring the Refresh Direction for the Network Address Translation 42

Configuring the Carrier Grade NAT for Static Port Forwarding 44

Configuring the Dynamic Port Ranges for NAT44 46

Configuring 1:1 Redundancy 47

Configuring Multiple Public Address Pools 48

Configuring Port Limit per VRF 50

Configuring Same Address Pool for Different NAT Instances 52

Configuring High Availability of Data Path Service Virtual Interface (SVI) 55

Configuring the Export and Logging for the Network Address Translation Table

Entries 57

Configuring the Server Address and Port for Netflow Logging 57

Configuring the Path Maximum Transmission Unit for Netflow Logging 59

Configuring the Refresh Rate for Netflow Logging 61

Configuring Session-Logging for a NAT44 or DS-Lite Instance 63

Configuring the Timeout for Netflow Logging 65

Configuring the Carrier Grade Service Engine 67

Bringing Up the CGSE Board 67

Configuring IPv4/IPv6 Stateless Translator (XLAT) 69

XLAT ServiceApp Configuration 69

XLAT Instance Configuration 70

Line Card Upgrade 71

UPGRADE FROM_ UBOOT to 559 & MANS FPGA to 0.41014 71

Configuring IPv6 Rapid Development 72

Ping to BR Anycast Address 75

Enable Additional 6rd Features 75

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 v

Contents

Configuring Dual Stack Lite Instance 77

Configuring PCP Server for NAT44 Instance 81

Configuring PCP Server for DS-Lite Instance 82

Configuration Examples for Implementing the Carrier Grade NAT 84

Configuring a Different Inside VRF Map to a Different Outside VRF: Example 84

Configuring a Different Inside VRF Map to a Same Outside VRF: Example 85

Configuring ACL for a Infrastructure Service Virtual Interface: Example 86

NAT44 Configuration: Example 86

NAT64 Stateless Configuration: Example 88

Predefined NAT Configuration: Example 89

DS Lite Configuration: Example 90

IPv6 ServiceApp and Static Route Configuration 90

IPv4 ServiceApp and Static Route Configuration 90

DS Lite Configuration 90

Bulk Port Allocation and Syslog Configuration: Example 91

PPTP ALG Configuration: Example 91

NAT44 Instance 91

DBL Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 91

PCP Server Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 92

Services Redundancy Configuation (Active/Standby): Example 92

Configuration of Multiple Address Pools: Example 92

Configuration of Port Limit per VRF: Example 92

Configuration of Same Public Address Pool across Different NAT Instances: Example 93

High Availability on data Path SVI: Example 93

CHAPTER 3

External Logging 95

Bulk Port Allocation 95

Restrictions for Bulk Port Allocation 95

Session logging 96

Syslog Logging 96

Restrictions for Syslog 96

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

vi OL-32659-01

Contents

Syslog Message Format 96

Header 97

Structured Data 98

MSG 98

Netflow v9 Support 100

NetFlow Record Format 100

Frequently Asked Questions (FAQs) 115

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 vii

Contents

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

viii OL-32659-01

Contents

Preface

The Preface contains these sections:

•Changes to This Document, page ix

•Obtaining Documentation and Submitting a Service Request, page ix

Changes to This Document

This table lists the technical changes made to this document since it was first released.

Table 1: Changes to This Document

Change SummaryDateRevision

Initial release of this document.July 2014OL-32659-01

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 ix

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

xOL-32659-01

Preface

Obtaining Documentation and Submitting a Service Request

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Netzwerk-Router Handbücher

Cisco

Cisco ASR 900 Series Bedienungsanleitung

Cisco

Cisco Linksys WET11 Bedienungsanleitung

Cisco

Cisco 811 Bedienungsanleitung

Cisco

Cisco 700 series Bedienungsanleitung

Cisco

Cisco ME 4924-10GE Originalbetriebsanleitung

Cisco

Cisco 7200 Series Bedienungsanleitung

Cisco

Cisco 7206-VXR NPE-400 Bedienungsanleitung

Cisco

Cisco 3745 Bedienungsanleitung

Cisco

Cisco ASR 9001 Handbuch

Cisco

Cisco 827-4V - 827-4V Router - EN Kurzanleitung

Cisco

Cisco ASR 1013 Bedienungsanleitung

Cisco

Cisco WRT300N Bedienungsanleitung

Cisco

Cisco 1712 - Security Access Router Handbuch

Cisco

Cisco ASR 903 Bedienungsanleitung

Cisco

Cisco ASR 907 Handbuch

Cisco

Cisco ASR 5000 Series Bedienungs- und Sicherheitshinweise

Cisco

Cisco 805 Series Bedienungsanleitung

Cisco

Cisco uBR10012 Universal Broadband Router... Bedienungsanleitung

Cisco

Cisco IR829 Bedienungsanleitung

Cisco

Cisco 12000 - Series Chassis Modular Expansion... Installationsanleitung

Cisco

Cisco ASR 1000 Series Bedienungsanleitung

Cisco

Cisco ME-4924-10GE Handbuch

Cisco

Cisco 7600 Series Bedienungsanleitung

Cisco

Cisco ASR1006-10G-SEC/K9 - ASR 1006 VPN+FW Bundle... Bedienungsanleitung

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

LevelOne

LevelOne FBR-1416 Bedienungsanleitung

Dynacord

Dynacord Promatrix 6000 Bedienungsanleitung

Lorex

Lorex F5D8230-4 Bedienungsanleitung