While traffic is flowing, it is possible to change its path from going through NAT to bypassing NAT. This kind of transition while traffic is flowing is referred to as on-line change.
NAT bypass for L2-Aware NAT subscriber can be influenced with two configuration parameters (configure subscr-mgmt sub-prof nat-access-mode and configure filter ip-filter entry action l2-aware-nat-bypass). Table: Configuration options for selective L2-Aware NAT bypass lists possible (valid and invalid) combinations of the two.
Enabling and disabling NAT bypass (config>subscr-mgmt>sub-prof>nat-access-mode), is supported by changing the subscriber profile for the ESM subscriber with RADIUS/Gx. However, changing the subscriber profile configuration with CLI while the profile is in use is not allowed.
The recommend method to change the IP filter action (l2-aware-nat-bypass) is to override the existing IP filter using RADIUS or Gx.
For additional restrictions when using this feature, see Known Limitations section in the Release Notes.