Skip to main content
Garroyo
Garroyo
New Member
October 15, 2018
Question

Clear all NAT session

  • October 15, 2018
  • 1 reply
  • 23902 views

Hello Everybody

 

Is it possible in a F60E (5.4.9) to delete all NAT translation without deleting any other sessions?

 

Best regards

 

Gonzalo

    1 reply

    emnoc
    emnoc
    New Member
    October 15, 2018

    You could do this from the cli  1> set a session filter and then  2> clear those session based on that filter

     

    example

     

    diagnose sys session filter policy <id# >

    diagnose sys session list 

    diagnose sys session clear

     

     

     

    Garroyo
    GarroyoAuthor
    New Member
    October 17, 2018

    Hello

     

    I did what you do and seems to be fine. But I still have problems wit NAT one-to-one. is it not supposed to transform OneSource IP to it "equal" SecondaryIP keeping the same final octets? 

     

    I mean, i was to translate a 172.16.192.0/21 to 172.20.192.0/21 and this is the result

     

    ook=post dir=org act=snat 172.16.198.45:50236->255.255.255.255:1947(172.20.192.35:50236) hook=pre dir=reply act=dnat 255.255.255.255:1947->172.20.192.35:50236(172.16.198.45:50236)

     

    best regards

    emnoc
    emnoc
    New Member
    October 17, 2018

    It depends how are you nat'ing 

     

     

    example  fix and range

     

    edit poolnat

     

    set type fixed-port-range

     

    set startip 10.10.10.10

     

    set endip 10.10.10.100

     

    set source-startip 10.10.20.10

     

    set source-endip 10.10.20.100

     

    set arp-reply enable

     

    set arp-intf wan1

     

    end

     

     

     

    Terms & ConditionsAccessibility statement