IP Router Configuration
7705 SAR OS Router Configuration Guide 53
NAT Support for Fragmented Packets
The NAT functionality on the 7705 SAR can process UDP packet fragments; however, the
fragment containing the header must arrive first. If this condition is not met, the following
actions occur:
• For source NAT packets traversing from a private network to a public network,
fragmented packets that do not contain the UDP header are dropped.
• For source NAT packets traversing from a public network to a private network and
destined to a local IP address on the 7705 SAR, fragmented packets that do not
contain the UDP header are extracted to the CSM for processing and an ICMP error
message is sent to the sender.
Table 7: Session Resource Utilization Alarms
Event Description SNMP Notification
All security
session resources
have been
exhausted
This event is generated if all
session resources have been
exhausted (utilization reaches
100%)
aluSecSessionsExhausted
Security session
resource alarm
detected
This event is generated when a
resource alarm state is detected.
The alarm state is detected when
either the high watermark is
crossed (if configured) or all
session resources have been
exhausted.
aluSecSessionHiWtrMrkCrossed
Security session
resource alarm
cleared
This event is generated when a
security session resource alarm
state is cleared. This alarm state is
cleared when either the low
watermark is crossed (if
configured) or all sessions have
been cleared.
aluSecSessionLoWtrMrkCrossed
Security session
resource alarm
threshold
modified
This event is generated when the
high or low thresholds for the
alarm state are modified.
aluSecSessionWtrMrkModified
To Next Page
Loading...
