NAT service of NE40 is intermittently unreachable. During the interruption, PC of attached users cannot open WebPages, but it can ping through IP address of websites. Check NAT statistics and there is much nat translation failure the rapidly increases.
NE40 version: Version 3.10 RELEASE 2351
1. Check configuration and the configuration of nat service-class is:
nat service-class 1 connections 100
nat service-class 2 connections 500
nat service-class 3 connections 800
When enabling flow-action, it defaults class 2. Most of flow-action of NE40 id default. The connection is 500.
2. The connection of two IP addresses exceeds 500 through dis nat users and dis nat session. One IP address reaches 26408, which greatly surpasses 500.
3. Change the configuration of nat service-class:
nat service-class 1 connections 65535
nat service-class 2 connections 65535
nat service-class 3 connections 65535
The problem is solved.
nat translation failure, it is possible that nat session is full. Check whether or not there is abnormal session or user through dis nat session and dis nat users.
If there is nat translation failure, check whether or not nat session exceeds flow-action limit.