Cisco Cisco ASR 5000
Crypto Template Configuration Mode Commands
natt ▀
Command Line Interface Reference, StarOS Release 18 ▄
3041
natt
Configures Network Address Translation - Traversal (NAT-T) for all security associations associated with this crypto
template. This feature is disabled by default.
template. This feature is disabled by default.
Product
All Security Gateway products
Privilege
Security Administrator
Syntax
[ default | no ] natt [ include-header ] [ send-keepalive [ idle-interval idle_secs ] [
interval interval_secs ] ]
interval interval_secs ] ]
default
Disables NAT-T for all security associations associated with this crypto template.
no
Disables NAT-T for all security associations associated with this crypto template.
include-header
Includes the NAT-T header in IPSec packets.
send-keepalive [ idle-interval
idle_secs
] [ interval interval_secs
]
Sends NAT-Traversal keepalive messages.
idle-interval
idle_secs
: Specifies the number of seconds that can elapse without sending NAT
keepalive packets before sending NAT keepalive packets is started.
idle_secs
is an integer from 20 to
86400. Default: 60.
interval
interval_secs
: Specifies the number of seconds between the sending of NAT keepalive
packets.
interval_secs
is an integer from 20 to 86400. Default: 60.
Usage
Use this command to configure NAT-T for security associations within this crypto template.
Example
The following command disables NAT-T for this crypto template:
no natt