Configuring NAT Reliability
The NAT reliability function enables a device to properly transmit NAT services, which prevents service traffic interruptions.
Usage Scenario
If a fault occurs on a NAT device or NAT service board during NAT operation, NAT cannot be performed. As a result, user services are interrupted. To address this problem, configure NAT reliability. The NE20E supports inter-board backup and determines the master/backup status according to the NSP 1:1 mode and .
Configuring Single-Chassis Inter-Board Hot Backup for NAT
You can configure the single-chassis inter-board hot backup function to improve the reliability of a NAT device.
Context
Two service boards are working in 1:1 mode on a NAT device with NSPs working in 1:1 mode to implement single-chassis inter-board hot backup. The inter-board backup mechanism verifies that the data stored on a master NAT service board is consistent with that stored on a backup NAT service board. If the master NAT service board fails, a master/backup NAT service board switchover is performed to ensure that services are running properly. In this situation, users are unaware of this fault.
Procedure
- (Optional) Configure value-added service management (VSM) high availability (HA) hot backup functions.
- Run service-ha delay-time delay-time
The delay time is set for VSM HA hot backup.
On a device with the service-ha delay-time command run, session entries can be backed up only if the active time of session traffic is longer than the delay time configured for VSM HA hot backup.
- Run service-ha delay-time delay-time
- Configure a service-location backup group that implements single-chassis inter-board HA hot backup.
- Create a service-instance-group instance group and bind it to the service-location backup group.
- Bind a NAT instance to a service-instance-group instance group.
- Run service-instance-group service-instance-group-name
The NAT instance is bound to the service-instance-group instance group.
Each NAT instance group can only be bound to a single service-instance-group instance group. Different NAT instance groups can be bound to the same service-instance-group instance group.
- Run service-instance-group service-instance-group-name
Verifying the NAT Reliability Configuration
After configuring NAT reliability, run the following display commands to check NAT reliability configurations.
Procedure
- Run the display service-ha global-information delay-time command to check the delay time configured for inter-board VSM HA hot backup on a single chassis.
- Run the display service-location service-location-id command to check the configuration of a service-location backup group.
- Run the display service-instance-group service-instance-group-name command to check the configuration of a service-instance-group instance group.
- Run the display nat instance [ instance-name ] command to check the configuration of a NAT instance.
