ME60-X3---NAT issue

yechao99 · Created Dec 25, 2018 02:48:07

usually NAT many issue, so it's good for us

3li · Created Dec 25, 2018 10:08:26

Thanks you

yjhd · Created Dec 26, 2018 02:58:32

rule 5 permit ip sourceuser-group after-auth-ug destination ip-address 185.43.190.41 0

Torrent · Created Dec 28, 2018 06:11:57

For customer’srequirement, we need configure an extra behavior before “classifierafter-auth-tc behavior nat-bind”. So that, it will match the behavior firstwhen access 172.30.2.1 since the traffic policy match order, then will matchthe nat behavior when access internet.

Also, the address172.30.2.1 seems be natted before ME60 which is displayed on the ME60 is185.43.190.41, so I am afraid we should configure the destination address185.43.190.41 for the extra behavior.

thanks for sharing

Finn92 · Created Dec 29, 2018 01:55:17

configure an extra behavior before “classifier after-auth-tc behaviornat-bind”

acl number 6003

rule 5 permit ip sourceuser-group after-auth-ug destination ip-address 185.43.190.41 0

#

traffic classifierafter-auth-permit operator or

if-match acl 6003

#

traffic behaviorperm2

#

traffic policy web

undo classifierafter-auth-tc behavior nat-bind //we need undo it first since the traffic policy match order

classifier after-auth-permit behavior perm2 //add new policy

classifierafter-auth-tc behavior nat-bind

it's very helpful for sovling issue .

SupperRobin · Created Dec 29, 2018 03:32:13

the address172.30.2.1 seems be natted before ME60 which is displayed on the ME60 is185.43.190.41, so I am afraid we should configure the destination address185.43.190.41 for the extra behavior.

yjhd · Created Dec 29, 2018 05:43:23

For customer’srequirement, we need configure an extra behavior before “classifierafter-auth-tc behavior nat-bind”. So that, it will match the behavior firstwhen access 172.30.2.1 since the traffic policy match order, then will matchthe nat behavior when access internet.

Also, the address172.30.2.1 seems be natted before ME60 which is displayed on the ME60 is185.43.190.41, so I am afraid we should configure the destination address185.43.190.41 for the extra behavior.

littlestone · Created Dec 29, 2018 12:13:22

NAT (Network Address Translation) was proposed in 1994. When some hosts inside the private network have already been assigned to local IP addresses (i.e. private addresses used only in the private network)

w1 · Created Dec 31, 2018 15:11:04

NAT issue for ME60 device, we need pay more attention on the traffic-policy and the rule order, like this case, it show us the typecail NAT issue cased by the traffic-policy, thanks for your sharing

ME60-X3---NAT issue

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

ME60-X3---NAT issue

Third Party’s Trade Secret

My Followers