Interim logging for CGN sessions

You can configure hyperscale CGN resource allocation IP pools to cause hyperscale hardware logging to send interim log messages. Normally hyperscale hardware logging only sends log messages at the start or end of a session or both, depending on the logging mode. In some cases, for example for very long lived sessions, you might want to able to send log messages for a session while it is active. Interim logging is compatible with all types of CGN IP Pools.

In a hyperscale VDOM, you can use the pba-interim-log firewall IP Pool option to configure interim logging:

config firewall ippool

edit <name>

set type cgn-resource-allocation

set pba-interim-log <log-interval>

end

<log-interval> is the number of seconds between sending log messages in the range 600 to 86400 seconds. The default value of 0 disables interim logging.

Interim logging is supported by the NP7 hardware log module (hardware) and by host hardware logging (host). Interim logging is also compatible with per-session, per-mapping, and per-session ending logging modes and works with the NetFlow and syslog log formats. For per-session ending logging mode, if interim logging is also enabled a log message is sent when the session starts, at the interim logging time intervals, and when the session ends.

For more information about hardware logging see: Hardware logging.