Got it

Huawei Enterprise Support Community

The users of the private network cannot access the Internet server due to the in

Created: Apr 8, 2016 06:19:39Latest reply: Apr 8, 2016 22:14:08 1466 1 0 0 0

Networking:user----(NAT)NE40----NE80----server(Internet);

Description:the NAT users under NE40 cannot access some Internet server under NE80,but the other Internet access is normal.

x
convention：

Like (0) Dislike (0) Favorite(0) Report

 Previous: How Do I Check Default Configurations on an Interface?

Next: Dot1q-tunnel over etherchannel



Ravger Created Apr 8, 2016 22:14:08

Handling Process

1、the configuration is correct,the users can go on line normally,so does the Internet server.

2、recheck the configuration, and detect the address of NAT address pool and Interface server is similar, so we hesitate the Internet server mask is too large. After check, ensure the condition. So the packets of the Internet server cannot be forwarded to NE40.

3、reconfigure the mask of the Internet server correct the problem is solved.

Root Cause

The address pool of NAT is 211.*.2*0.33, the server address is 211.*.2*0.100, the mask is 255.255.255.0，the address of the server and that of the NE40 NAT address pool belong to the same network segment. As the users access these servers, because NE40 does NAT，so the source address used by the packet received by the server is that of the NAT address pool. As the server responds the users, it thinks the users and itself belong to the same network segment, it will send ARP request, instead of sending the packets to gateway NE80 to forward. These ARP packets are impossible to be received, so the NAT users cannot communicate with the server, while the other Internet access is normal.

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.

Please bind your phone number to obtain invitation bonus.

Thanks for using Huawei Enterprise Support Community! We will help you learn how we collect, use, store and share your personal information and the rights you have in accordance with Privacy Policy and User Agreement.

I have read and agree to the Privacy Policy and User Agreement.

I agree to receive recommendations that I might be interested in based on my daily behaviors such as post reply, like, and browse.

I agree to receive email notifications from the Huawei Enterprise Support Community and I understand that I can unsubscribe at any time.

Enterprise

Consumer

Corporate

Carriers

The users of the private network cannot access the Internet server due to the in

Third Party’s Trade Secret

My Followers