No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.

Knowledge Base

Because Servers Implement Dual-system Hot Backup, NAT Server Fails

Publication Date:  2012-07-17  |   Views:  423  |   Downloads:  0  |   Author:  Liumin001  |   Document ID:  EKB1000000682


Alarm Information


Handling Process

Configure the NAT function on the firewall to allow the intranet servers to proactively access the Internet.

Root Cause

The destination address of packets from the Internet to the servers becomes the virtual IP address of the servers, after they go through the firewall. Moreover, these packets match nat server, and the master server receives packets whose destination IP address is the virtual IP address. Therefore, the intranet can be accessed from the Internet.
When an intranet server accesses the Internet, the source IP addresses of the packets sent by the server is the physical IP address of the server, or These packets cannot match nat server. Therefore, the intranet servers cannot access the Internet.


For two intranet servers that implement dual-system hot backup (the source IP address of packets from the master server is the physical IP address of the master server), you can configure nat server to allow access from the Internet to the intranet and from the intranet to the Internet.