没有激活nat的license导致用户上线成功但访问不了外网

发布时间:  2014-07-10 浏览次数:  52 下载次数:  0
问题描述

版本:
ME60  V600R007C00SPC300

组网:
PC ------  ME60 ------ Radius Server

问题描述:

某新开局点PPP用户拨号上线成功,但是访问不了外网

[ME60]disp access-user domain isp1

  ------------------------------------------------------------------------------

  UserID  Username                Interface      IP address       MAC

          Vlan          IPv6 address             Access type

  ------------------------------------------------------------------------------

  75      test                    GE2/0/2        X.X.X.X   XXXX-XXXX-XXXX
          -/-           -                        PPPoE         

  ------------------------------------------------------------------------------

  Normal users                       : 1

  RUI Local users                    : 0

  RUI Remote users                   : 0

  Total users                        : 1

处理过程

查看设备GTL license

Item name          Item type  Value    Description

 -------------------------------------------------------------

 LME0CONN01         Resource   256      Concurrent Users(1k)

 LME0SMVP00         Resource   32       EnhanceLicense_MVPN

 LME0STUN00         Resource   32       TUNNEL

 LME0SNAT00         Resource   32       NAT for SPU C

 LME0SNET00         Resource   32       ENHANCE_NS

 LME0VIDE00         Resource   32       MQE License

 LME0IPSEC00        Resource   32       IPSEC License

 LME0NATDS00        Resource   256      2M NAT Session

 LME0L2NATDS00      Resource   32       L2NAT license

 LME0DSLITEDS00     Resource   32       DS-lite license

 LME04020G00        Resource   32       20G NAT BandWidth

 LME0L2NAT01        Resource   32       L2NAT License for VSUF

 LME0DSLITE01       Resource   32       DS-Lite License for VSUF

 LME0PCP00          Resource   32       PCP License for VSUF

 LME0NAT6401        Resource   32       NAT64 License for VSUF

 

 Item name          (View)Resource License Command-line

 -------------------------------------------------------------

 LME0IPSEC00        (License)active ipsec slot slot-id

 LME0NATDS00        (License)active nat session-table size

 LME0L2NATDS00      (License)active l2nat slot slot-id

 LME0DSLITEDS00     (License)active ds-lite slot slot-id

 LME04020G00        (License)active nat bandwidth-enhance slot slot-id

 LME0L2NAT01        (License)active l2nat vsuf slot slot-id

 LME0DSLITE01       (License)active ds-lite vsuf slot slot-id

 LME0PCP00          (License)active pcp vsuf slot slot-id

 LME0NAT6401        (License)active nat64 vsuf slot slot-id

  Master board license state: Demo. The license for the current configuration will expire in 174 days. Apply for authentic license before the current license expires


GTL license
都已经申请.查询nat板丢弃统计,发现存在license的丢弃.进一步查看license视图下的配置,发现没有分配session.

[ME60] dis nat statistics discard slot 6

This operation will take a few minutes. Press 'Ctrl+C' to break ...

Slot: 6 Engine: 0

---------------------------------------------------------------------------

 Limit on license                               :856

---------------------------------------------------------------------------

Slot: 6 Card: 0

 

激活nat板的session表分配,用户访问外网正常.

license

active nat session-table size 16 slot 6 engine 0

active  nat session-table size 16 slot 6 card 0

根因

ME60设备nat license没有激活

解决方案
激活nat板的session表分配
建议与总结

加载并激活CGN License后,设备会根据配置的active nat session-table size命令,将License中的会话表资源分配到各业务板或CPU
所有业务板或CPU的会话资源总数是由License文件控制。

END