Enhanced logging for NAT persistent sessions utilizing PBA 7.4.4

Interim logs can be configured for port block allocation (PBS) NAT logging. This enables continuous access to PBA event logs during an ongoing session, and provides comprehensive logging throughout a session's lifespan.

PBA event logs are generated periodically based on the configured time interval:

config firewall ippool
    edit pba-ippool
        set type port-block-allocation
        set pba-interim-log <integer>
    next
end

pba-interim-log <integer>

Port block allocation interim logging interval, in seconds (600 - 86400, default = 0 which disables interim logging).

For example, when the PBA interim log interval is set to 600 seconds, event logs are obtained every ten minutes:

• Configure the PBA IP pool with a time interval:

  config firewall ippool
      edit "pba-ippool"
          set type port-block-allocation
          set startip 172.16.200.151
          set endip 172.16.200.151
          set block-size 64
          set num-blocks-per-user 1
          set pba-interim-log 600
      next
  end

• Check the event logs:

  # execute log display
  
  2 logs found.
  
  2 logs returned.
  
  1: date=2024-02-04 time=13:34:04 eventtime=1707082444264865326 tz="-0800" logid="0100022024" type="event" subtype="system" level="notice" vd="vdom1" logdesc="IP pool PBA interim log" action="ippool-interim" saddr="10.1.100.42" nat=172.16.200.151 portbegin=5117 portend=5180 poolname="pba-ippool" duration=1200 msg="IPpool interim"
  
  2: date=2024-02-04 time=13:24:03 eventtime=1707081844204865060 tz="-0800" logid="0100022024" type="event" subtype="system" level="notice" vd="vdom1" logdesc="IP pool PBA interim log" action="ippool-interim" saddr="10.1.100.42" nat=172.16.200.151 portbegin=5117 portend=5180 poolname="pba-ippool" duration=600 msg="IPpool interim"