Thanks, this really helped to resolve issue
________________________________
От: Dave Barach (dbarach) <dbar...@cisco.com>
Отправлено: 30 сентября 2019 г. 14:35:57
Кому: Юрий Иванов <format_...@outlook.com>; Vpp-dev@lists.fd.io 
<Vpp-dev@lists.fd.io>
Тема: RE: Need help to configure NAT44, reply packets not working


I’d suggest using the packet tracer to see what happens to the return-path 
traffic. “trace add dpdk-input 100”, send a ping, then “show trace”.



HTH... Dave



From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of ???? ??????
Sent: Monday, September 30, 2019 3:43 AM
To: Vpp-dev@lists.fd.io
Subject: [vpp-dev] Need help to configure NAT44, reply packets not working



Hi,



I've configured NAT44 in lab to test it out before using it in production:



set interface nat44 in GigabitEthernet0/3/0

set interface nat44 out GigabitEthernet0/4/0



set int ip address GigabitEthernet0/3/0 10.0.0.1/31

set int state GigabitEthernet0/3/0 up



bfd udp session add interface GigabitEthernet0/3/0 local-addr 10.0.0.1 
peer-addrr

 10.0.0.0 desired-min-tx 100000 required-min-rx 100000 detect-mult 3



set int ip address GigabitEthernet0/4/0 18.46.159.2/26

set int state GigabitEthernet0/4/0 up



ip route add 10.0.0.0/8 via 10.0.0.0 GigabitEthernet0/3/0

ip route add 0.0.0.0/0 via 18.46.159.1 GigabitEthernet0/4/0



set interface nat44 in GigabitEthernet0/3/0

set interface nat44 out GigabitEthernet0/4/0



nat44 add address 18.46.159.10 - 18.46.159.20



I can see that packet is arriving to remote host as expected and host replies 
back:

*Sep 30 07:25:03.441: ICMP: echo reply sent, src 8.1.160.2, dst 18.46.159.20, 
topology BASE, dscp 0 topoid 0
*Sep 30 07:25:04.449: ICMP: echo reply sent, src 8.1.160.2, dst 18.46.159.20, 
topology BASE, dscp 0 topoid 0



But my host with private address (10.9.1.168)  doesn't see it.

Looks like VPP host doesn't translate backwards icmp.



Can someone please help?



P.S. Sorry if I post message to incorrect group.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#14091): https://lists.fd.io/g/vpp-dev/message/14091
Mute This Topic: https://lists.fd.io/mt/34342523/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to