No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

The Service is Intermittently Unreachable because nat session of Parts of Users under NE40 Exceeds nat service-class Upper Limit

Publication Date:  2012-07-27 Views:  43 Downloads:  0
Issue Description
Topology: MAN-Router-NE40-PC
NAT service of NE40 is intermittently unreachable. During the interruption, PC of attached users cannot open WebPages, but it can ping through IP address of websites. Check NAT statistics and there is much nat translation failure the rapidly increases.
NE40 version: Version 3.10 RELEASE 2351
Alarm Information
Null
Handling Process
1. Check configuration and the configuration of nat service-class is:
nat service-class 1 connections 100                                            
nat service-class 2 connections 500                                            
nat service-class 3 connections 800 
When enabling flow-action, it defaults class 2. Most of flow-action of NE40 id default. The connection is 500.
2. The connection of two IP addresses exceeds 500 through dis nat users and dis nat session. One IP address reaches 26408, which greatly surpasses 500.
3. Change the configuration of nat service-class:
nat service-class 1 connections 65535                                          
nat service-class 2 connections 65535                                          
nat service-class 3 connections 65535 
The problem is solved.
Root Cause
nat translation failure, it is possible that nat session is full. Check whether or not there is abnormal session or user through dis nat session and dis nat users.
Suggestions
If there is nat translation failure, check whether or not nat session exceeds flow-action limit.
      

END