AR路由器配置NAT Server时提示地址冲突导致配置失败

发布时间:  2015-08-19 浏览次数:  3720 下载次数:  0
问题描述
在AR设备上执行命令nat server时,提示如下错误:

[Huawei-GigabitEthernet0/0/0] nat server protocol tcp global 10.1.1.1 9008 inside 192.168.130.11 8080                                
  Error: The address conflicts with interface or ARP IP. 

设备上的主要配置如下:

#
interface GigabitEthernet0/0/0
ip address 10.1.1.3 255.255.255.0     
nat server protocol tcp global current-interface 2121 inside 10.0.1.10 2121
nat server protocol tcp global current-interface www inside 192.168.130.10 8008
nat outbound 2000
#
interface GigabitEthernet0/0/1
ip address 10.0.0.1 255.255.255.0
#
interface GigabitEthernet0/0/2
ip address 10.0.1.1 255.255.255.0
nat outbound 2000
处理过程
1、从接口GE0/0/0的配置上看,并没有使用10.1.1.1这个地址,怀疑是这个地址已经在其他接口上使用了。更换一个地址验证:

[Huawei-GigabitEthernet0/0/0] nat server protocol tcp global 10.1.1.4 9008 inside 192.168.130.11 8080                                
[Huawei-GigabitEthernet0/0/0] 

更换地址后,映射成功。

2、执行命令display arp 查看设备上的ARP表项,发现10.1.1.1地址已经在ARP列表中,说明此地址已经被使用了。

<Huawei> display arp                                                                                                                    
IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE                                                      
                                          VLAN/CEVLAN PVC                                                                           
------------------------------------------------------------------------------                                                      
10.1.1.3        0819-a6cd-a895            I -         GE0/0/0                                                                       
10.1.1.1        5489-98f4-5a8e  19        D-0         GE0/0/0                                                                       
10.0.0.1        0819-a6cd-a896            I -         GE0/0/1                                                                       
10.0.1.1        0819-a6cd-a897            I -         GE0/0/2                                                                       
200.1.1.1       5489-9874-b897            I -         Eth1/0/1                                                                      
192.168.1.1     0819-a6cd-a894            I -         Vlanif10                                                                      
172.1.1.2       0819-a6cd-a894            I -         Eth-Trunk10                                                                   
------------------------------------------------------------------------------                                                      
Total:7         Dynamic:1       Static:0     Interface:6    
建议与总结
配置NAT Server提示地址冲突时,如果发现配置没有问题,可以检查这个地址本身是否存在问题,比如本案例中,地址已经在其他设备上被使用了。

END