No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
A PC Cannot Access the Internet Through the AR

A PC Cannot Access the Internet Through the AR

Keywords

Static route, NAT mapping, Internet access failure

Abstract

The AR functions as the intranet gateway, and the intranet PC can successfully ping internal and external interfaces of the AR. The PC cannot access the Internet because the next hop IP address is not configured in the static route.

Problem Description

The intranet PC can successfully ping internal and external interfaces of the AR. When the intranet source address is specified in the ping command, the AR can ping the Internet. The PC fails to ping the IP address of the connected carrier's device.

Procedure

1. The PC can ping the external interface's address of the AR, indicating that the gateway address configuration of the PC is incorrect.

2. Run the display current-configuration | include Ethernet0/0/4 command to check the configuration of Eth0/0/4.

<Huawei> display current-configuration | include Ethernet0/0/4 
# 
interface Ethernet0/0/4
 tcp adjust-mss 1200
 nat outbound 2000
 ip address dhcp-alloc 
 ip route-static 0.0.0.0 0.0.0.0 Ethernet0/0/4 
#

3. Run the display nat session all verbose command to check NAT entries of the AR.

<Huawei> display nat session all verbose
 NAT Session Table Information:
 Protocol: TCP(6) 
 SrcAddrPort Vpn : 192.168.1.254 65532
 DestAddr Port Vpn : 1.1.1.1 1024
 Time To Live: 60 s NAT-Info
 New SrcAddr:----
 New SrcPort: 1024
 New DestAddr: 2.2.2.2
 New DestPort: 21

 Protocol: UDP(6)
 SrcAddrPort Vpn : 192.168.1.253 65532
 DestAddr Port Vpn : 1.1.1.1 1024
 Time To Live: 60 s
 NAT-Info New SrcAddr:----
 New SrcPort: 1024
 New DestAddr: 2.2.2.2
 New DestPort: 21 Total : 2

The value 192.168.1.254 is the IP address of the internal interface on the AR, and the value 192.168.1.253 is the IP address of the PC. There are NAT session entries for the two IP addresses.

4. Change the static route to ip route-static 0.0.0.0 0.0.0.0 Ethernet0/0/4 1.1.1.1. Then the PC can access the Internet.

Root Cause

When receiving an Internet access packet from the intranet, the AR sends the packet out through the local outbound interface Ethernet0/0/4. The Ethernet is the multi-access network where the router cannot determine the gateway address. The next hop IP address should be configured so that the router can determine the gateway address.

Solution

Configure the next hop IP address or next hop IP address plus the local outbound interface in the static route.

ip route-static 0.0.0.0 0.0.0.0 Ethernet0/0/4 1.1.1.1.

Summary

On a multi-access network, specify the next hop IP address in the static route.

Translation
Download
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 456492

Downloads: 4321

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next