Forum Discussion

Wendell_Huang's avatar
Wendell_Huang
Icon for Nimbostratus rankNimbostratus
Nov 19, 2018

Ping some NAT addresses from a internal server ,Some of them are ok, but othters are not. I doubt this for a long time. Could some one can help me.

F5-----N5k(all servers' gateway)--------Servers

NAT objects:

1.59.151.104.164 --orgin 192.168.12.104

2.59.151.104.165 --orgin 192.168.12.106

I ping the 59.151.104.164 from 192.168.12.59,it's ok;

I ping the 59.151.104.165 from 192.168.12.59, it's not;

I ping the 192.168.12.106 form 192.168.12.59,it's ok;

These are the configuration:

ltm nat 59.151.104.164 { originating-address 192.168.12.104

traffic-group traffic-group-1

translation-address 59.151.104.164

} root@(xes-stanby)(cfg-sync Changes Pending)(Active)(/Common)(tmos) list ltm nat 59.151.104.165

ltm nat 59.151.104.165 {

originating-address 192.168.12.106

traffic-group traffic-group-1

translation-address 59.151.104.165

}

Server's network configration:

[huangjianpeng@192.168.12.59 ~]$ route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

192.168.12.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0

0.0.0.0 192.168.12.254 0.0.0.0 UG 0 0 0 eth0

These are my tests:

[huangjianpeng@192.168.12.59 ~]$ ping 59.151.104.164 -c 2

PING 59.151.104.164 (59.151.104.164) 56(84) bytes of data.

64 bytes from 192.168.12.104: icmp_seq=1 ttl=128 time=1.46 ms

64 bytes from 192.168.12.104: icmp_seq=2 ttl=128 time=0.612 ms

--- 59.151.104.164 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms

rtt min/avg/max/mdev = 0.612/1.038/1.464/0.426 ms

[huangjianpeng@192.168.12.59 ~]$ ping 59.151.104.165 -c 2

PING 59.151.104.165 (59.151.104.165) 56(84) bytes of data.

--- 59.151.104.165 ping statistics ---

2 packets transmitted, 0 received, 100% packet loss, time 11001ms

[huangjianpeng@192.168.12.59 ~]$ ping 192.168.12.106 -c 2

PING 192.168.12.106 (192.168.12.106) 56(84) bytes of data.

64 bytes from 192.168.12.106: icmp_seq=1 ttl=128 time=0.534 ms

64 bytes from 192.168.12.106: icmp_seq=2 ttl=128 time=0.711 ms

--- 192.168.12.106 ping statistics ---

2 packets transmitted, 2 received, 0% packet loss, time 1000ms

rtt min/avg/max/mdev = 0.534/0.622/0.711/0.091 ms

The connections table information:

root@(xes)(cfg-sync Changes Pending)(Active)(/Common)(tmos) show sys connection cs-client-addr 192.168.12.59

Sys::Connections 192.168.12.59:43378 59.151.104.165:8 192.168.12.59:30287 192.168.12.106:8 icmp 111 (tmm: 3) none

192.168.12.59:35442 59.151.104.164:8 192.168.12.59:35442 192.168.12.104:8 icmp 145 (tmm: 2) none

Total records returned: 2

What I can see is that the ss-client-port has some difference between the two results. The NAT address 59.151.104.164 don't chanage the ss-client-port but 59.151.104.165 changed it.

There is someone can help me, Thanks!

No RepliesBe the first to reply