Problem and solution when an error is reported during NAT IP address configuration on a virtual system

21

Only public IP addresses assigned to the virtual system can be used as the public IP addresses for NAT, NAT server, and interfaces.

Other related questions:
Problem and solution when the USG6000 virtual system cannot be configured
Check the permission of the administrator account used for login. If you use the root system administrator account to configure the virtual system, the level of the root system administrator shall be the system administrator. If you use the virtual system administrator account to configure the virtual system, the level of the virtual system administrator shall be the system administrator or the configuration administrator with the read and write permissions. Choose System > Admin > Administrator Role and configure the administrator account.

A message about interface conflict or ARP IP address conflict is displayed when a NAT server is configured
When the IP address of an interface on the public network is used in the nat server command to configure an intranet server to provide services for users on the public network, the following error message is displayed: [AR2200-GigabitEthernet0/0/1] ip address 22.1.1.1 24 [AR2200-GigabitEthernet0/0/1] nat server protocol 80 global 22.1.1.1 inside 10.1.1.1 Error: The address conflicts with interface or ARP IP. To solve this problem, change the public IP address to the current-interface in the nat server command as follows: [AR2200-GigabitEthernet0/0/1] nat server protocol 80 global current-interface inside 10.1.1.1

Problem and solution when the firewall cannot ping the virtual IP address of the VRRP group
Possible causes are as follows: A VRID conflict occurs. The virtual IP address ping function is disabled. According to RFC3768, the ping command cannot be used to detect the virtual IP address connectivity. Huawei provides the virtual IP address ping function for the convenience of monitoring. This function is enabled by default. If it is disabled, you can run the vrrp virtual-ip ping enable command to enable it.

Problem and solution when a conflict occurs during address set configuration on the USG6000 series
The conflict occurs because the device is already in the address set.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top