There is an inconsistency between maximum sessions and port allocation / cleanup. After some point no more sessions are created because of port allocation error. Sugestion to add api/cli commands for forcing NAT session/port/user cleanup.