nat
NatPolicy



public class NatPolicy

Stats:
nat.NatPolicyStats nat.NatVappPolicyStats

Properties
dnatClassifier Specifies the Destination NAT classifier.

type=string
default=
Displayed(tab/group)=NAT Classifier (/DNAT)

dnatIsaGroupId Specifies the identifier of the NAT Integrated Service Adaptor group that processes the traffic flows subject to Destination NAT and associated with this NAT policy. The values of dnatRouter and dnatIsaGrp must be either both zero or both non-zero. A non-zero value is only allowed while the value of dnatClassifier is not empty.

type=int
access=read-only
default=0
minimum=0
maximum=4

dnatIsaGroupName Specifies the name of dnatIsaGroupId for GUI

type=string
default=
Displayed(tab/group)=ISA Group (/DNAT/DNAT-Only)

dnatRouterId Specifies the outside virtual router instance for the traffic flows subject to Destination NAT and associated with this NAT policy. The values of dnatRouter and dnatIsaGroup must be either both zero or both non-zero. A non-zero value is only allowed while the value of dnatClassifier is not empty.

type=int
access=read-only
default=0
minimum=0
maximum=10240

dnatRouterName Specifies the name of dnatRoutingInstanceId for GUI

type=string
default=
Displayed(tab/group)=Router (/DNAT/DNAT-Only)

ipfixExportPolicyPointer This is the IPFIX Export Policy Pointer .

type=Pointer
default=
Displayed(tab/group)=IPFIX Policy (/IPFIX Export Policy)

maxNumBlock Specifies the maximum number of port blocks allowed for a NAT subscriber associated with this policy. The value of this object is only relevant for Large Scale NAT; it is not allowed to change it while a Layer-2-Aware NAT pool is associated with this policy."

type=int
default=1
minimum=1
maximum=40
Displayed(tab/group)=Max Port Blocks (/Port Limits)

poolName The Pool name to use with this policy.

type=string
access=read-only
default=
minimum=0
maximum=32

poolPointer The Pool to use with this policy.

type=Pointer
default=
Displayed(tab/group)=NAT Pool (/NAT)

poolVirtualRouter The Virtual router of the Pool to use with this policy.

type=long
access=read-only
default=0
minimum=0
maximum=4096

portReservationCount The value of portReservationCount specifies, for each NAT subscriber associated with this policy, the number of ports that are reserved within its allocated block. The number of ports in its allocated block is specified within the configuration of the pool associated with this policy, by the values of the Pool PortResvervationType and PortReservationValue. The value obtained by subtracting the portReservationCount from the number of ports, is a soft limit; this soft limit can only be exceeded by sessions that belong to one of the forwarding classes specified by the value of prioritySessionFCSet. The value of portReservationCount must be smaller than the number of ports in the allocated block.

type=int
default=0
minimum=0
maximum=65534
Displayed(tab/group)=Port Reservation Count (/Port Limits)

toSubRetention The value of toSubRetention specifies the subscriber retention timeout, the time a NAT subscriber and its associated IP address is kept after all hosts and associated port blocks have expired.

Additional (Deprecation) Information

If the toSubRetention is set and either or all of the toSubRetentionMin, toSubRetentionHr and toSubRetentionDay are set as well, the value of toSubRetention will be ignored

DEPRECATED: 17.3 - In the future, this property will be used internally. Please use nat.NatPolicy.toSubRetentionMin, nat.NatPolicy.toSubRetentionHr and nat.NatPolicy.toSubRetentionDay
type=int
default=0
minimum=0
maximum=1440
units=Minutes

toSubRetentionDay Specifies the day of specifies the subscriber retention timeout.

type=int
default=0
minimum=0
maximum=1
Displayed(tab/group)=Days (Timeouts/Subscriber Retention)

toSubRetentionHr Specifies the hour(s) of specifies the subscriber retention timeout.

type=int
default=0
minimum=0
maximum=23
Displayed(tab/group)=Hours (Timeouts/Subscriber Retention)

toSubRetentionMin Specifies the minute(s) of specifies the subscriber retention timeout.

type=int
default=0
minimum=0
maximum=59
Displayed(tab/group)=Minutes (Timeouts/Subscriber Retention)

watermarkHigh watermarkHigh specifies the high watermark of the port usage for each NAT subscriber associated with this policy. The value of this object must be higher than the value of watermarkLow, unless both are equal to zero.

type=int
default=0
minimum=0
maximum=100
units=%
Displayed(tab/group)=High Watermark (/Port Limits)

watermarkLow watermarkLow specifies the low watermark of the port usage for each NAT subscriber associated with this policy. The value of this object must be lower than the value of watermarkHigh, unless both are equal to zero.

type=int
default=0
minimum=0
maximum=99
units=%
Displayed(tab/group)=Low Watermark (/Port Limits)

  
Properties inherited from nat.AbstractNatPlcy
algBitMask, creationOrigin, description, displayedName, filtering, l2Outside, maxPortFwdEntry, natPlcyPurpose, portFwdRangeEnd, prioritySessionFCSet, sessionLimit, sessionReservationCount, sessionWatermarkHigh, sessionWatermarkLow, sipTimeout, sipTimeoutHr, sipTimeoutMin, sipTimeoutSec, tcpMssAdjust, toIcmpQuery, toIcmpQueryMin, toIcmpQuerySec, toTcpEstab, toTcpEstabDay, toTcpEstabHr, toTcpEstabMin, toTcpEstabSec, toTcpRstMin, toTcpRstSec, toTcpSyn, toTcpSynDay, toTcpSynHr, toTcpSynMin, toTcpSynSec, toTcpTimeWait, toTcpTimeWaitMin, toTcpTimeWaitSec, toTcpTrans, toTcpTransDay, toTcpTransHr, toTcpTransMin, toTcpTransSec, toUdp, toUdpDay, toUdpDns, toUdpDnsDay, toUdpDnsHr, toUdpDnsMin, toUdpDnsSec, toUdpHr, toUdpInitial, toUdpInitialMin, toUdpInitialSec, toUdpMin, toUdpSec, udpInbndRefresh
 
Properties inherited from policy.PolicyDefinition
configurationAction, configurationMode, discoveryState, displayedName, distributionMode, isMaster, lastSyncTime, numberOfUnderlyingPolicyItems, origin, policyMode, policySyncGroupPointer, policyType
 
Properties inherited from policy.PolicyObject
description, displayedName, globalPolicy, id, isLocal, policyType, siteId, siteName, templateObject
 
Properties inherited from ManagedObject
actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed
 
Methods inherited from policy.PolicyDefinition
distribute, distributeUsingGroups, distributeV2, evaluatePolicy, findGlobal, findLocal, findReleased, getSyncTaskResult, resetToReleasedPolicy, setConfigurationModeToDraft, setConfigurationModeToReleased, setDistributionModeToLocalEditOnly, setDistributionModeToSyncWithGlobal, syncTo, syncToLocalWithResync
 
Supported Network Elements
7750 SR Supported from 10.0.R1 until 12.0.R1
  • Excluded chassis types: 7750-SRc12, 7750-SRc4, 7750-SRa4, 7750-SRa8, 7750-SR1 Fixed CFM, 7750 SR-14s, 7750 SR-7s, 7750 SR-1s, 7750 SR-2s
Supported from 12.0.R1 until 13.0.R8
  • Excluded chassis types: 7750-SRc4, 7750-SRa4, 7750-SRa8, 7750 SR-1e, 7750 SR-2e, 7750 SR-3e, 7750-SR1 Fixed CFM, 7750 SR-14s, 7750 SR-7s, 7750 SR-1s, 7750 SR-2s
Supported from 13.0.R8 until 20.5.R1
  • Excluded chassis types: 7750-SRc4, 7750-SRa4, 7750-SRa8, 7750-SR1 Fixed CFM, 7750 SR-14s, 7750 SR-7s, 7750 SR-1s, 7750 SR-2s
Supported from 20.5.R1
  • Excluded chassis types: 7750-SRa4, 7750-SRa8, 7750 SR-14s
7705 SAR Gen 2
7450 ESS Supported from 11.0.R1
  • Excluded chassis types: 7450-ESS1
Product Specifics
7450 ESS (all versions)
7450 ESS 20.0
7450 ESS 21.0
7450 ESS 22.0
7450 ESS 23.0
7450 ESS 24.0
7450 ESS 25.0
7705 SAR Gen 2 (all versions)
7705 SAR Gen 2 25.0
7750 SR (all versions)
7750 SR 20.0
7750 SR 21.0
7750 SR 22.0
7750 SR 23.0
7750 SR 24.0
7750 SR 25.0