ip nat translation

Syntax

ip nat translation { timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout
|icmp-timeout | gre-timeout } seconds

no ip nat translation { timeout | udp-timeout | dns-timeout | tcp-timeout | finrst-timeout |
icmp-timeout | gre-timeout}

Release Information

Command introduced before JUNOSe Release 7.1.0.
gre-timeout keyword added in JUNOSe Release 7.3.0.

Description

Changes or disables translation timeouts, per virtual router, for existing and newly created translations in the translation table. All timeouts for this command support a range of 1–2147483 seconds (about 25 days). The no version enables the timer using its default value.

Note: GRE translations are used as optimizations to discard GRE traffic. You can use the gre-timeout keyword to control GRE aging timeout, even though we do not support NAPT for GRE. The GRE aging timer has no effect on any simple translations GRE might use.

Options

• timeout—Sets aging time for dynamic translations (except for overloaded translations); default value is 86400 seconds (24 hours)
• udp-timeout—Sets aging time for UDP protocol translations; default value is 300 seconds (5 minutes)
• dns-timeout—Sets aging time for DNS protocol translations (port 53 on TCP or UDP); default value is 60 seconds
• tcp-timeout—Sets aging time for TCP protocol translations; default value is 86400 seconds (24 hours)
• first-timeout—Sets aging time for TCP connections terminated with RST or FIN flags; default value is 60 seconds
• icmp-timeout—Sets aging time for ICMP protocol translations; default value is 300 seconds (5 minutes)
• gre-timeout—Sets aging time for GRE protocol translations; default value is 300 seconds (5 minutes)
• seconds—Number of seconds before the router removes an unused NAT table entry

Mode

Global Configuration

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.