nat server session enhance enable

Function

The nat server session enhance enable command enables a device to create a flow table after the device receives the first packet that is not a TCP SYN packet and the packet matches the address of an address-level internal server.

The undo nat server session enhance enable command disables a device from creating a flow table after the device receives the first packet that is not a TCP SYN packet and the packet matches the address of an address-level internal server.

This function is disabled by default.

This command is supported only on the NetEngine 8000 F1A.

Format

nat server session enhance enable

undo nat server session enhance enable

Parameters

None

Views

NAT instance view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
nat	write

Usage Guidelines

Usage Scenario

To enable a device to create a flow table after the device receives the first packet that is not a TCP SYN packet and the packet matches the address of an address-level internal server, run the nat server session enhance enable command. This command is used when an internal server receives and sends TCP packets over inconsistent paths.

Precautions

The nat server session enhance enable command is mutually exclusive with the nat alg command.

Running the nat server session enhance enable command or its undo form triggers the reestablishment of the flow tables that are created after packets match the address-level internal server.

The flow table aging time is equal to the aging time of TCP packets, regardless of TCP packet types.

Example

# Enable a device to create a flow table after the device receives the first packet that is not a TCP SYN packet and the packet matches the address of an address-level internal server.

<HUAWEI> system-view
[~HUAWEI] nat instance cpe1 id 1
[*HUAWEI-nat-instance-cpe1] nat server session enhance enable