NAT mapping controls and EIF session limits

You can control network address translation (NAT) mapping refresh behavior and establish endpoint-independent filtering session limits for flows on MS-MICs. The following features, previously introduced on MS-DPCs, are available: 

• Clear NAT mappings using the clear services nat mappings command. 
• Configure criteria for refreshing NAT mappings for inbound flows and outbound flows. To configure refresh criteria, include the mapping-refresh statement at the [edit services nat rule rule-name term term-name then translated secure-nat-mapping] hierarchy level. 
• Configure a limit for inbound sessions for an EIF mapping. To configure this limit, include the eif-flow-limit statement at the [edit services nat rule rule-name term term-name then translated secure-nat-mapping] hierarchy level. 
• Configure a limit for the number of dropped flows (ingress, egress, or both) for a specified service set. To configure this limit, include the max-drop-flows statement at the [edit services service-set service-set-name] hierarchy level.