Only parts of users can access network after NE40 enables NAT because of false configuration. RESET NAT SESSION and they can access network. Earlier NAT configuration of NE40 is as follows:
nat address-group group1 10.10.10.100 10.10.10.105 slot 3 no-pat
rule-map intervlan rule1 ip 10.10.10.0 0.0.0.255 any
flow-action act1 nat address-group group1
eacl eacl1 rule1 act1
access-group router eacl eacl1
ip route 10.10.10.0 255.255.255.0 null0
This case is applied to NE40、NE80、S8016的VRP3.10-2xxx version.
Configure the address pool of NE40: "nat address-group group1 10.10.10.100 10.10.10.105 slot 3 no-pat" is changed as: "nat address-group group1 10.10.10.100 10.10.10.105 slot 3 ", users of private network can access network normally.
Users of private network access public network with NO-PAT, NAT does not converse port number and only converse address. One public network address just maps one user address of private network. When there is not enough address in address pool, only parts of users can access network. Reset NAT session and address of users’ address pool is released again. And then these users can occupy the address and access network.
For NAT configuraton, notice the meaning of parameters.