Panasonic 8000 - Manual (Page 141)

Nortel Secure Router 8000 Series
Troubleshooting - VAS__________
4 NAT troubleshooting
A: You can configure a different public address of the NAT server from the public
address of interfaces. If a user has only one public address, you can configure an address
pool to allocate public addresses to internal users.
• When a NAT Server Is Configured, Are ACL Rules Implemented on Traffic on the
Private Network or Public Network?
A: When configuring NAT or a NAT server, ACL rules are implemented on traffic on the
private network instead of traffic on the public network. Generally, ACL rules are applied on
inbound interfaces to match packets on the inbound interfaces. For the NAT server, however,
ACL rules are applied to match the packets after address translation is implemented.
• Q: How Can the Failures of Load Balancing, Flow Control, Speed Control, and BT Flow
Control on the NAT Server Be Handled?
A: You can run the reset firewall session table command in the user view to rectify the
faults.
4.5 Diagnostic tools
4.5.1 Display commands
Command Description Note
display firewall session
aging-time Displays the valid time for the address
translation. -
display firewall
servermap Displays the entries of the NAT server
translation table in NP. Includes the added
static servermap
entries in the process
of configuring the
NAT server and the
temporary
servermap entries
in the process of
handling ALG.
display firewall session
statistic Displays the statistics of the session
entries in NP. Includes the total
number of sessions
and the number of
sessions of TCP,
UDP, ICMP, and
fragment.
display firewall session
table [ verbose ] [ source
sour-addr | destination
dest-addr ]
Displays the session in NP.
display nat all Displays all configurations of the
address translation and the
configuration of the NAT ALG. -
display nat
address-group Displays information about the
configured address pool. -
Issue 01.01 (30 March 2009) Nortel Networks Inc. 4-11