Router User Manual

4 NAT troubleshooting
Nortel Secure Router 8000 Series
Troubleshooting - VAS
4-20 Nortel Networks Inc. Issue 01.01 (30 March 2009)
*0.97096416 Nortel SEC/8/ASPF:
[ASPF] Packet Information:
SrcAddr =0x05010102(5.1.1.2) //the packet from the external network, the
source IP is the IP of the external network
DstAddr =0x05010105(5.1.1.5) //the packet from the external network, the
destination IP is the IP of the public network configured by the NAT Server
Proto =6 //the protocol number AppPro
=0
PayloadLen =0
MoreFrag =0
*0.97096416 Nortel SEC/8/ASPF:
[ASPF] The session of (ffffffff|2000259) not found
*0.97096416 Nortel SEC/8/ASPF:
[ASPF] a new FTP session created!(3|2000259)
*0.97096512 Nortel SEC/8/ASPF:
[ASPF] Packet L3Offset =24.
*0.97096512 Nortel SEC/8/ASPF:
[ASPF] Packet Information:
SrcAddr =0x04010101(4.1.1.1) //the packet from the internal network, the
source IP is the IP of the internal network
DstAddr =0x05010102(5.1.1.2) //the packet from the internal network, the
destination IP is the IP of the external network
Proto =6
AppPro =0
PayloadLen =24
MoreFrag =0
debugging nat-alg server-map
<Nortel> debugging nat-alg server-map
<Nortel> terminal debugging
Info:Current terminal debugging is on
<Nortel> terminal monitor
Info:Current terminal monitor is on
<Nortel>
*0.97962544 Nortel SEC/8/ASPF:
Download Temp ServerMap(Proto=6): //deliver the ephemeral
servermap table
DstIP = 5.1.1.2; DstPort= 3797; SrcIP = 4.1.1.1; SrcPort = 0
NatSrvInIP = 5.1.1.5; NatSrvInPort = 0; GlobalSrcIP = 5.1.1.5; AgingTime = 14
Table 4-7 Description of the output information of the debugging nat-alg server-map command
Item Description
Proto The number of the protocol (TCP protocol)
DstIP The destination IP (5.1.1.2, the IP of the external network)
DstPort The destination port number (3797)
SrcIP The port number of the source IP (the IP 4.1.1.1 of the internal
network)
SrcPort The number of the source port (0)