Error IP POOL in SNAT

[dortiz9007]

I have a Fortigate device with two internet access lines, and one of them is having browsing issues. I've already checked with the provider and the service is working fine. I've run a debug and see this IP-related message. Could someone help me?

func=get_new_addr line=1205 msg="find SNAT: IP-204.199.64.3(from IPPOOL), port-51586"

[Toshi_Esumi]

It's normal. Below is my outgoing ping packet to 4.2.2.3 through the NAT. The wan1 interface IP is x.x.x.y while the GW is x.x.x.x. The source IP:192.168.202.111 is SNATed with the interface IP:x.x.x.y.

id=65308 trace_id=4 func=print_pkt_detail line=5879 msg="vd-root:0 received a packet(proto=1, 192.168.202.111:1->4.2.2.3:2048) tun_id=0.0.0.0 from internal. type=8, code=0, id=1, seq=246."
id=65308 trace_id=4 func=init_ip_session_common line=6070 msg="allocate a new session-000212ab"
id=65308 trace_id=4 func=vf_ip_route_input_common line=2612 msg="find a route: flag=04000000 gw-x.x.x.x via wan1"
id=65308 trace_id=4 func=__iprope_tree_check line=528 msg="gnum-100004, use int hash, slot=61, len=2"
id=65308 trace_id=4 func=get_new_addr line=1265 msg="find SNAT: IP-x.x.x.y(from IPPOOL), port-60418"
id=65308 trace_id=4 func=fw_forward_handler line=991 msg="Allowed by Policy-1: SNAT"
id=65308 trace_id=4 func=__ip_session_run_tuple line=3433 msg="SNAT 192.168.202.111->x.x.x.y:60418"

Toshi

[dingjerry_FTNT]

Hi @dortiz9007 ,

"Error IP POOL in SNAT", what do you mean by error? 

The message you posted is normal, no error in it.

Without your FGT config, without how you configured the firewall policy for NAT, how can we assist you? 

At least you need to post the firewall policy settings, the NAT option settings, what NAT IP you are expected to get, etc.

It is better to post all the debug flow outputs.

[kaman]

Hi dortiz9007,

The below debug output is normal

func=get_new_addr line=1205 msg="find SNAT: IP-204.199.64.3(from IPPOOL), port-51586"

Could you please provide more details about the browsing issues you're experiencing?

Also, please share the full debug commands output

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/54688/debugging-the-packet-flow

Regards,
Aman