Mrad_231364
Oct 28, 2015Nimbostratus
CGNAT logging
Hello,
Is there any iRule for CGNAT so we can send log messages to a syslog server. What we need exactly is the below:
IP/port --> natted IP/port
Thank you.
The purpose of PBA is to reduce logging verbosity, but it comes at the cost of translation space efficiency. If you intend to log every translation, then it makes sense to switch to NAPT. Keep in mind that when PBA allocates a block for a subscriber, a log entry is created describing that block. This information can be used to track a translation back to the subscriber.
(I suspect, from your last post, that you are already aware of this fact and are really just looking to log remotely what is currently being logged locally. If so, I apologize for rehashing facts that you already know.)
Regardless of the translation type, a Logging Profile uses a Log Publisher, which can use remote logging.