how to delete a section from nat

HaseebAkhtar · Created Feb 10, 2020 12:05:54

To delete an address segment from a NAT address pool,
1) run the section <section-num> lock command to lock the address segment first.
2) Then cut the users using cut access-user , after all the users using the public IP address in the address segment go offline,

or

use reset nat session table [ source { inside inside-address | global global-address } | destination { inside inside- address | global global-address } to clear NAT entries

3) run the undo section <section-num> command to delete the address segment.

(if you are not using AAA then you've to wait for all NAT users to go offline before running undo section command. )

Popeye_Wang · Created Feb 10, 2020 11:58:07

Hello,

Before using the undo section command, you can use the cut access-user command to forcibly disconnecting the online users.

HaseebAkhtar · Created Feb 10, 2020 12:05:54

To delete an address segment from a NAT address pool,
1) run the section <section-num> lock command to lock the address segment first.
2) Then cut the users using cut access-user , after all the users using the public IP address in the address segment go offline,

or

use reset nat session table [ source { inside inside-address | global global-address } | destination { inside inside- address | global global-address } to clear NAT entries

3) run the undo section <section-num> command to delete the address segment.

(if you are not using AAA then you've to wait for all NAT users to go offline before running undo section command. )

Vijaykumar · Created Feb 11, 2020 06:06:59

I have rest NAT session but again nat session established.

Vijaykumar · Created Feb 12, 2020 08:10:19

Kindly find below NAT config.

nat instance GT_NAT_1 id 1
service-instance-group 1
nat address-group groupname1 group-id 1
section 0 172.16.16.0 mask 24
section 0 lock
section 1 172.17.17.0 mask 27
section 2 172.17.18.0 mask 27
section 3 172.17.19.0 mask 27
section 4 172.17.20.0 mask 27
section 5 172.17.21.0 mask 28
section 6 172.17.22.0 mask 28
section 7 172.17.23.0 mask 27
section 8 172.17.24.0 mask 27
section 9 172.17.25.0 mask 27
nat outbound any address-group groupname1
nat session-limit tcp 1500
nat session-limit udp 1500
nat alg all
nat log session enable netstream

Vijaykumar_Yadav · Created Feb 13, 2020 15:19:55

HUAWEI NE40E-X8
VRP (R) software, Version 5.170 (NE40E&80E V600R009C20SPC600)

Vijaykumar · Created Feb 18, 2020 09:51:33

The issue still remain.

how to delete a section from nat

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

how to delete a section from nat

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers