No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

On the USG9560, the NAT server UNR routing error is introduced and the VM server cannot be accessed.

Publication Date:  2019-10-10  |   Views:  129  |   Downloads:  0  |   Author:  lWX623687  |   Document ID:  EKB1100039181

Contents

Issue Description

USG9560 Traffic is stopping for some devices and VM

Handling Process


1.Check the session entries of the abnormal VM host (10.128.64.107). It is found that only one-way packet sending is available and no return data packet is available.



2.The normal VM host (10.128.36.60) uses the route 197.159.xx.0/24 to return packets.

The abnormal VM host (10.128.64.107) uses the unr route 197.159.xx.xx/32 to return packets. As a result, packet loss occurs.





Root Cause

3.When the nat-server command is run, the unr-route function is enabled. As a result, the return packets cannot find the correct OSPF route for packet return,Therefore, the VM server cannot access the Internet.


Solution

4. Find the server mapping option and check whether the nat server policy is matched.




 

5.Deselect the configure black hole route option.




6.after deselect the configure black hole route optionUse the d f s t v s I 197.159.xx.xx to check the firewall session is normal.




7.Ping test the public ip 8.8.8.8 is normal.