cancel
Showing results for 
Search instead for 
Did you mean: 

Ping some NAT addresses from a internal server ,Some of them are ok, but othters are not. I doubt this for a long time. Could some one can help me.

Wendell_Huang
Nimbostratus
Nimbostratus

F5-----N5k(all servers' gateway)--------Servers

 

NAT objects:

 

1.59.151.104.164 --orgin 192.168.12.104

 

2.59.151.104.165 --orgin 192.168.12.106

 

I ping the 59.151.104.164 from 192.168.12.59,it's ok;

 

I ping the 59.151.104.165 from 192.168.12.59, it's not;

 

I ping the 192.168.12.106 form 192.168.12.59,it's ok;

 

These are the configuration:

 

ltm nat 59.151.104.164 { originating-address 192.168.12.104

 

traffic-group traffic-group-1 translation-address 59.151.104.164

} root@(xes-stanby)(cfg-sync Changes Pending)(Active)(/Common)(tmos) list ltm nat 59.151.104.165

 

ltm nat 59.151.104.165 {

 

originating-address 192.168.12.106 traffic-group traffic-group-1 translation-address 59.151.104.165

}

 

Server's network configration:

 

[huangjianpeng@192.168.12.59 ~]$ route -n

 

Kernel IP routing table

 

Destination Gateway Genmask Flags Metric Ref Use Iface

 

192.168.12.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

 

169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0

 

0.0.0.0 192.168.12.254 0.0.0.0 UG 0 0 0 eth0

 

These are my tests:

 

[huangjianpeng@192.168.12.59 ~]$ ping 59.151.104.164 -c 2

 

PING 59.151.104.164 (59.151.104.164) 56(84) bytes of data.

 

64 bytes from 192.168.12.104: icmp_seq=1 ttl=128 time=1.46 ms

 

64 bytes from 192.168.12.104: icmp_seq=2 ttl=128 time=0.612 ms

 

--- 59.151.104.164 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms

 

rtt min/avg/max/mdev = 0.612/1.038/1.464/0.426 ms

 

[huangjianpeng@192.168.12.59 ~]$ ping 59.151.104.165 -c 2

 

PING 59.151.104.165 (59.151.104.165) 56(84) bytes of data.

 

--- 59.151.104.165 ping statistics ---

 

2 packets transmitted, 0 received, 100% packet loss, time 11001ms

 

[huangjianpeng@192.168.12.59 ~]$ ping 192.168.12.106 -c 2

 

PING 192.168.12.106 (192.168.12.106) 56(84) bytes of data.

 

64 bytes from 192.168.12.106: icmp_seq=1 ttl=128 time=0.534 ms

 

64 bytes from 192.168.12.106: icmp_seq=2 ttl=128 time=0.711 ms

 

--- 192.168.12.106 ping statistics ---

 

2 packets transmitted, 2 received, 0% packet loss, time 1000ms

 

rtt min/avg/max/mdev = 0.534/0.622/0.711/0.091 ms

 

The connections table information:

 

root@(xes)(cfg-sync Changes Pending)(Active)(/Common)(tmos) show sys connection cs-client-addr 192.168.12.59

 

Sys::Connections 192.168.12.59:43378 59.151.104.165:8 192.168.12.59:30287 192.168.12.106:8 icmp 111 (tmm: 3) none

 

192.168.12.59:35442 59.151.104.164:8 192.168.12.59:35442 192.168.12.104:8 icmp 145 (tmm: 2) none

 

Total records returned: 2

 

What I can see is that the ss-client-port has some difference between the two results. The NAT address 59.151.104.164 don't chanage the ss-client-port but 59.151.104.165 changed it.

 

There is someone can help me, Thanks!

 

0 REPLIES 0