Newly Configured NAT Does not Take Effect Because the Session has not Aged

Created: Apr 7, 2016 20:06:11Latest reply: Apr 8, 2016 09:08:23 1428 1 0 0 0

1. According to the original NAT configuration on the USG5000, the internal server C.C.C.C uses the address A.A.A.A in the public address pool. Later, the internal server C.C.C.C uses the address B.B.B.B in another address pool, and the NAT is re-configured. After the address change, the TCP service provided by the C.C.C.C is down.
Alarm Information
None.

x
convention：
Emotion(0)

Like (0) Dislike (0) Favorite(0) Report

 Previous: Do I Have Other Ways to Access Web Proxy Resources, Apart from Clicking the Link

Next: PCs on the Intranet Were Unable to Access the Internal Server Because Intrazone



(0) (0)

^2#

Osaideo Created Apr 8, 2016 09:08:23

Handling Process
When the workload is comparatively light, run the reset firewall session table command to clear the session table. The problem is rectified. Root Cause
1. Check the configuration. No error is found.

2. Run the display firewall session command to check the session table. The session of the C.C.C.C for accessing the public network still uses the address pool where A.A.A.A is. The session is for the TCP service that runs uninterruptedly on the internal server C.C.C.C. Server C.C.C.C sends TCP traffic uninterruptedly, preventing the TCP session from aging. Therefore, the TCP session still uses the address pool where A.A.A.A is after the configuration is changed. As a result, the TCP service is interrupted.
Solution
Suggestions
None.

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.

Please bind your phone number to obtain invitation bonus.

Enterprise

Consumer

Corporate

Carriers

Newly Configured NAT Does not Take Effect Because the Session has not Aged

Third Party’s Trade Secret

My Followers