Cisco Cisco Packet Data Gateway (PDG) Wartungshandbuch

Generally Available 06-30-2010

New Configuration Commands

3-17

NAT Commands - New in Release 9.0

This section provides information on new NAT commands available in Release 9.0.

firewall tcp-idle-timeout-action

This command configures action to take on TCP idle timeout expiry. In this release, this CLI
configuration is also available to NAT with the “[600-00-7805] NAT/PAT With DPI” license.

CLI (Firewall-and-NAT Policy Configuration Mode)

firewall tcp-idle-timeout-action { drop | reset }

{ default | no } firewall tcp-idle-timeout-action

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

nat private-ip-flow-timeout

This command configures the Private IP NPU Flow Timeout setting. By default, for
NAT-enabled calls the downlink private IP NPU flow will not be installed at call setup for a
subscriber session. The flow will only be installed on demand. When there is no traffic on
the private flow, the private IP flow will be removed after the configurable timeout period.

CLI (Firewall-and-NAT Policy Configuration Mode)

nat private-ip-flow-timeout timeout

{ default | no } nat private-ip-flow-timeout

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

secondary ip pool

This command specifies a secondary IP pool to be used as backup pool for NAT.

MPORTANT

This command is license dependent, requiring the [600-00-7871] NAT Bypass license. For
more information, please contact your local sales representative.

CLI (APN Configuration Mode)

secondary ip pool pool_name

no secondary ip pool

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.