The intranet PC cannot access the server normally.

Torrent · Created Nov 6, 2018 02:51:53

Hi, author. thanks for sharing such a good example how to troubleshooting if intranet user cannot go to Internet

could you please explain more about firewall session, how to use this?

thanks very much. The intranet PC cannot access the server normally.-2795579-1

The intranet PC cannot access the server normally.-2795579-1

yjhd · Created Nov 6, 2018 07:18:39

Successful packet capture, the server 10.172.10.99 will initiate an access to 9.8.187.128, in this case both directions will hit the same nat server, do two-way NAT. Unsuccessful packet capture, because the source port of the initiator is not 18888, it can only hit the forward NAT, so the source address sent to the server at this time is still 10.172.10.99, after the pc receives the message because The request is 9.8.187.128 instead of 10.172.10.99, so there is no response to any message.

Mark.hu · Created Nov 6, 2018 07:22:52

Regarding this issue, I think it is something we often encounter. Before I encountered such a problem, the usual method was to release the security policy, but the risk is very high, so I will refer to your method in the future. Conduct troubleshooting, thank you for sharing

lizhi94 · Created Nov 6, 2018 07:25:34

When the PC accesses the server, the server needs to access some of its own services through the global address of the nat server. The ports of these services do not do the nat server. You need to configure intra-domain NAT to resolve this issue.
this intra-domain NAT is useful to solve this problem，thanks for your offering

GongXiaochuan · Created Nov 6, 2018 07:34:56

NAT, also called network masquerading or IP masquerading, is a technology used to rewrite the source or destination IP address in an IP packet when it is in transit across a router or firewall. NAT is commonly used in the scenarios where multiple hosts use the same public IP address to access private networks

This post was last edited by GongXiaochuan at 2018-11-06 07:40.

limgsc · Created Nov 6, 2018 09:42:34

your document is work for me , i get the point , fix my issue by your doc thanks you very much ,
also hope you public more doc that levle like this .
would you please also mention where from the technical detail , i can found it from orignial part .
from orignial part i can found more correct parameter , this is more important .

No.9527 · Created Nov 8, 2018 08:21:07

when NAT is required for all addresses of the network segment (For example: 192.168.1.0/24 except 192.168.1.2), you can configure a translation rule in which the source address is set to 192.168.1.2 and disable NAT for packets originating at 192.168.1.2. Then configure another translation rule for performing NAT for packets originating at the network segment 192.168.1.0/24.

By default, no action is configured in a NAT policy rule.

lizhi94 · Created Nov 13, 2018 09:43:27

PC cannot access the server normally，If the PC does not access other ports on the server, then the server must automatically access other addresses. Through packet capture analysis, this is the case, the server will access its own global address, so you need to configure intra-domain NAT or full mapping. Nat server.

littlestone · Created Nov 26, 2018 13:03:15

The DNS standard currently defined in RFC2136 describes a series of rules that allow DNS to dynamically update records. DNS systems based on these rules can be called DDNS. Windows 2000 includes DNS systems that support DDNS standards. DDNS is an innovation of long-term name resolution standards, which will have a far-reaching impact on network planning and management.

The intranet PC cannot access the server normally.

Issue Phenomenon

Issue analysis

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

The intranet PC cannot access the server normally.

Issue Phenomenon

Issue analysis

Third Party’s Trade Secret

My Followers