At a site, NE40 is upgraded to Vrp3.10-2321 from Vrp3.10-0426 , and flow-action (without no-pat) is lost in comparison of configurations. NAT is problematic.
Add the commands lost manually one by one.
After the equipment is upgraded , flow-action is not being followed by the parameter of no-pat, resulting in lost of configuration of no-pat.
It's necessary to compare the configuration after upgrade.