Two-node cluster hot backup address mapping, external network can’t visit the server

Publication Date:  2012-09-13 Views:  120 Downloads:  1
Issue Description
The client use two USG5320 to do the two-node cluster hot backup, A is primary, B is secondary. One to one address mapping, two-node cluster hot backup normal, connect internet normally. Visit the private address of the server from internal network normally. But visit the server from internet isn’t normal. From internal network can’t visit the server using the address of public network.

Alarm Information
 NONE
Handling Process
Read the file attached
Root Cause
1  Hasn’t registered to the police
2  Hasn’t let go all of the packet filtering
3  Wrong configuration
Suggestions
1 NAT Address pool tie with the VRRP of output-interface, or NAT Server tie with the VRRP of input-interface
2 in the configuration of the NAT Server, ZONE parameters can limit the resource region of visit. If related to the inner region NAT or multi-region visit, ZONE parameters need to be deleted.

END