Skip to main content
dortiz9007
New Member
May 9, 2025
Question

Error IP POOL in SNAT

  • May 9, 2025
  • 3 replies
  • 883 views

I have a Fortigate device with two internet access lines, and one of them is having browsing issues. I've already checked with the provider and the service is working fine. I've run a debug and see this IP-related message. Could someone help me?

 

func=get_new_addr line=1205 msg="find SNAT: IP-204.199.64.3(from IPPOOL), port-51586"

3 replies

Toshi_Esumi
SuperUser
SuperUser
May 9, 2025

It's normal. Below is my outgoing ping packet to 4.2.2.3 through the NAT. The wan1 interface IP is x.x.x.y while the GW is x.x.x.x. The source IP:192.168.202.111 is SNATed with the interface IP:x.x.x.y.

id=65308 trace_id=4 func=print_pkt_detail line=5879 msg="vd-root:0 received a packet(proto=1, 192.168.202.111:1->4.2.2.3:2048) tun_id=0.0.0.0 from internal. type=8, code=0, id=1, seq=246."
id=65308 trace_id=4 func=init_ip_session_common line=6070 msg="allocate a new session-000212ab"
id=65308 trace_id=4 func=vf_ip_route_input_common line=2612 msg="find a route: flag=04000000 gw-x.x.x.x via wan1"
id=65308 trace_id=4 func=__iprope_tree_check line=528 msg="gnum-100004, use int hash, slot=61, len=2"
id=65308 trace_id=4 func=get_new_addr line=1265 msg="find SNAT: IP-x.x.x.y(from IPPOOL), port-60418"
id=65308 trace_id=4 func=fw_forward_handler line=991 msg="Allowed by Policy-1: SNAT"
id=65308 trace_id=4 func=__ip_session_run_tuple line=3433 msg="SNAT 192.168.202.111->x.x.x.y:60418"

Toshi

dingjerry_FTNT
Staff
Staff
May 10, 2025

Hi @dortiz9007 ,

 

"Error IP POOL in SNAT", what do you mean by error? 

 

The message you posted is normal, no error in it.

 

Without your FGT config, without how you configured the firewall policy for NAT, how can we assist you? 

 

At least you need to post the firewall policy settings, the NAT option settings, what NAT IP you are expected to get, etc.

 

It is better to post all the debug flow outputs.

kaman
Staff
Staff
May 10, 2025

Hi dortiz9007,

The below debug output is normal

func=get_new_addr line=1205 msg="find SNAT: IP-204.199.64.3(from IPPOOL), port-51586"


Could you please provide more details about the browsing issues you're experiencing?


Also, please share the full debug commands output

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/54688/debugging-the-packet-flow


Regards,
Aman