Cisco GRS Manual de usuario

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco

CRS Router, Release 5.2.x

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Text Part Number: OL-32659-01

CONTENTS

Preface

Preface ix

Changes to This Document ix

Obtaining Documentation and Submitting a Service Request ix

CHAPTER 1

New and Changed Carrier Grade NAT Feature Information 1

New and Changed Carrier Grade NAT Features 1

CHAPTER 2

Implementing Carrier Grade NAT on Cisco IOS XR Software 3

Carrier Grade NAT Overview and Benefits 3

Carrier Grade NAT Overview 3

Benefits of Carrier Grade NAT 4

IPv4 Address Shortage 4

NAT and NAPT Overview 4

Network Address and Port Mapping 4

Translation Filtering 5

Prerequisites for Implementing the Carrier Grade NAT 5

CGSE PLIM 6

CGSE Multi-Chassis Support 7

CGSE Plus PLIM 7

Information About Carrier Grade NAT 7

Implementing NAT with ICMP 7

ICMP Query Session Timeout 7

Implementing NAT with TCP 8

Address and Port Mapping Behavior 8

Internally Initiated Connections 8

Externally Initiated Connections 8

Implementing NAT 44 over ISM 8

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 iii

Implementing NAT 64 over ISM 11

Double NAT 444 14

Address Family Translation 14

Cisco Carrier NAT Applications 14

IPv4/IPv6 Stateless Translator 14

IPv6 Rapid Deployment 15

Stateful NAT64 15

Dual Stack Lite 15

Port Control Protocol 16

Policy Functions 16

Application Level Gateway 16

FTP-ALG 16

RTSP-ALG 16

PPTP-ALG 17

TCP Maximum Segment Size Adjustment 17

Static Port Forwarding 17

1:1 Redundancy 18

Back-to-Back Deployment 18

Intelligent Port Management 18

Throughput Measurement 19

High Availability on the Data Path Service Virtual Interface (SVI) 20

External Logging 21

Netflow v9 Support 21

Syslog Support 21

Bulk Port Allocation 21

Destination-Based Logging 21

Implementing Carrier Grade NAT on Cisco IOS XR Software 22

Getting Started with the Carrier Grade NAT 22

Configuring the Service Role 22

Configuring the Service Instance and Location for the Carrier Grade NAT 23

Configuring the Service Virtual Interfaces 24

Configuring the Infrastructure Service Virtual Interface 24

Configuring the Application Service Virtual Interface 26

Configuring the Service Type Keyword Definition 27

Configuring an Inside and Outside Address Pool Map 28

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

iv OL-32659-01

Contents

Configuring the Policy Functions for the Carrier Grade NAT 30

Configuring Port Limit per Subscriber 30

Configuring the Timeout Value for the Protocol 32

Configuring the Timeout Value for the ICMP Protocol 32

Configuring the Timeout Value for the TCP Session 33

Configuring the Timeout Value for the UDP Session 35

Configuring the FTP ALG for NAT44 Instance 36

Configuring the RTSP ALG for NAT44 Instance 38

Configuring the PPTP ALG for a NAT44 Instance 39

Configuring the TCP Adjustment Value for the Maximum Segment Size 41

Configuring the Refresh Direction for the Network Address Translation 42

Configuring the Carrier Grade NAT for Static Port Forwarding 44

Configuring the Dynamic Port Ranges for NAT44 46

Configuring 1:1 Redundancy 47

Configuring Multiple Public Address Pools 48

Configuring Port Limit per VRF 50

Configuring Same Address Pool for Different NAT Instances 52

Configuring High Availability of Data Path Service Virtual Interface (SVI) 55

Configuring the Export and Logging for the Network Address Translation Table

Entries 57

Configuring the Server Address and Port for Netflow Logging 57

Configuring the Path Maximum Transmission Unit for Netflow Logging 59

Configuring the Refresh Rate for Netflow Logging 61

Configuring Session-Logging for a NAT44 or DS-Lite Instance 63

Configuring the Timeout for Netflow Logging 65

Configuring the Carrier Grade Service Engine 67

Bringing Up the CGSE Board 67

Configuring IPv4/IPv6 Stateless Translator (XLAT) 69

XLAT ServiceApp Configuration 69

XLAT Instance Configuration 70

Line Card Upgrade 71

UPGRADE FROM_ UBOOT to 559 & MANS FPGA to 0.41014 71

Configuring IPv6 Rapid Development 72

Ping to BR Anycast Address 75

Enable Additional 6rd Features 75

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 v

Contents

Configuring Dual Stack Lite Instance 77

Configuring PCP Server for NAT44 Instance 81

Configuring PCP Server for DS-Lite Instance 82

Configuration Examples for Implementing the Carrier Grade NAT 84

Configuring a Different Inside VRF Map to a Different Outside VRF: Example 84

Configuring a Different Inside VRF Map to a Same Outside VRF: Example 85

Configuring ACL for a Infrastructure Service Virtual Interface: Example 86

NAT44 Configuration: Example 86

NAT64 Stateless Configuration: Example 88

Predefined NAT Configuration: Example 89

DS Lite Configuration: Example 90

IPv6 ServiceApp and Static Route Configuration 90

IPv4 ServiceApp and Static Route Configuration 90

DS Lite Configuration 90

Bulk Port Allocation and Syslog Configuration: Example 91

PPTP ALG Configuration: Example 91

NAT44 Instance 91

DBL Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 91

PCP Server Configuration: Example 91

NAT44 Instance 91

DS-Lite Instance 92

Services Redundancy Configuation (Active/Standby): Example 92

Configuration of Multiple Address Pools: Example 92

Configuration of Port Limit per VRF: Example 92

Configuration of Same Public Address Pool across Different NAT Instances: Example 93

High Availability on data Path SVI: Example 93

CHAPTER 3

External Logging 95

Bulk Port Allocation 95

Restrictions for Bulk Port Allocation 95

Session logging 96

Syslog Logging 96

Restrictions for Syslog 96

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

vi OL-32659-01

Contents

Syslog Message Format 96

Header 97

Structured Data 98

MSG 98

Netflow v9 Support 100

NetFlow Record Format 100

Frequently Asked Questions (FAQs) 115

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 vii

Contents

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

viii OL-32659-01

Contents

Preface

The Preface contains these sections:

•Changes to This Document, page ix

•Obtaining Documentation and Submitting a Service Request, page ix

Changes to This Document

This table lists the technical changes made to this document since it was first released.

Table 1: Changes to This Document

Change SummaryDateRevision

Initial release of this document.July 2014OL-32659-01

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation, at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.

Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

OL-32659-01 ix

Cisco IOS XR Carrier Grade NAT Configuration Guide for the Cisco CRS Router, Release 5.2.x

xOL-32659-01

Preface

Obtaining Documentation and Submitting a Service Request

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Enrutador de red de Cisco

Cisco

Cisco 897VAW Manual de usuario

Cisco

Cisco 2651 Manual de usuario

Cisco

Cisco 8100 Series Manual

Cisco

Cisco 7609 Manual de usuario

Cisco

Cisco 4500-M Manual de instalación

Cisco

Cisco 2811 Series Manual de instrucciones

Cisco

Cisco ASR 900 Series Manual de usuario

Cisco

Cisco Catalyst 3850 Manual de funcionamiento

Cisco

Cisco 860 Series Manual

Cisco

Cisco ASR 5500 Manual de usuario

Cisco

Cisco ASR 903 Manual de usuario

Cisco

Cisco 7206VXR - VPN Bundle Router Manual de usuario

Cisco

Cisco BEFSR41 Manual de usuario

Cisco

Cisco Linksys EA2700 Manual de usuario

Cisco

Cisco 12000 - Series Chassis Modular Expansion... Manual

Cisco

Cisco ASR 920-24SZ-IM Manual de instrucciones

Cisco

Cisco VIC-2FXO - 3600 Voice Interface Card-Fxo... Instrucciones originales

Cisco

Cisco 7200 VXR Series Manual de usuario

Cisco

Cisco 7609 Manual de instrucciones

Cisco

Cisco WS-C3550-12G Manual de usuario

Cisco

Cisco XR 12410 Manual de usuario

Cisco

Cisco 10000 Series Manual de usuario

Cisco

Cisco RV042 - Small Business Dual WAN VPN Router Manual de usuario

Cisco

Cisco 900 Series Manual

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Digi

Digi IX14 Manual de usuario

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

EnGenius

EnGenius ESR-9710 Manual de usuario

LevelOne

LevelOne FBR-1416 Manual de usuario

Dynacord

Dynacord Promatrix 6000 Manual de usuario

Lorex

Lorex F5D8230-4 Manual de usuario