Checking Whether the Address Pool Bound to Outbound NAT Is Correct

Procedure

Run the display nat address-group command on the router to check whether the address pool bound to outbound NAT configured on the outbound interface is correct.

Check the index of the address pool bound to the interface.

<Huawei> display nat outbound 
 NAT Outbound Information:                                                      
 --------------------------------------------------------------------------     
 Interface                     Acl     Address-group/IP/Interface      Type     
 --------------------------------------------------------------------------     
 GigabitEthernet0/0/0         2000                        1.1.1.1    easyip     
 GigabitEthernet0/0/1         3000                              1       pat     
 --------------------------------------------------------------------------     
  Total : 2

For PAT mode, check IP addresses bound to the address pool based on the address pool index.

<Huawei> display nat address-group 1 
NAT Address-Group Information: 
-------------------------------------- 
Index  Start-address  End-address 
-------------------------------------- 
1      110.0.0.100    110.0.0.110  
-------------------------------------- 
Total : 1

For Easy IP mode, run the display nat outbound command on the router to view Easy IP information configured on the NAT outbound interface.

<Huawei> display nat outbound 
 NAT Outbound Information:                                                      
 --------------------------------------------------------------------------     
 Interface                     Acl     Address-group/IP/Interface      Type     
 --------------------------------------------------------------------------     
 GigabitEthernet0/0/0         2000                        1.1.1.1    easyip     
 GigabitEthernet0/0/1         3000                              1       pat     
 --------------------------------------------------------------------------     
  Total : 2

The preceding command output shows that Easy IP mode is configured on the outbound interface GigabitEthernet0/0/0 and the bound IP address is the interface IP address 1.1.1.1. If NAT fails, perform the following operations:

Check whether the bound IP address is the interface IP address. If so, check whether the interface IP address is valid.
Check whether the bound IP address is a VRRP virtual IP address. If so, check whether the interface IP address exists and then check whether the VRRP status of the interface is Master. You can run the display vrrp command in the interface view to check the VRRP status of the interface.

Run the ping command with the source IP address specified to check whether the public IP address can be pinged. For example, use the ping -a x.x.x.x y.y.y.y, where x.x.x.x indicates the IP address of the WAN interface or NAT address pool, and y.y.y.y indicates the WAN-side gateway address. The IP address that fails to be pinged cannot be used for NAT. For the cause of the ping failure, contact the ISP.

Back | Previous | Next