Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

[AF] External network users cannot access the video Services through the AF external network Interfaces IP plus port client setting restrictions

Posted
Updated
Byadmin
Views1

Problem Description

The customer deployment environment is shown in the figure below. The PC and server gateway are not on the AF device, but are in the same network segment as the AF device Interfaces IPNetwork Segment


Requirements: It is necessary to achieve that the PC side can access the server and view the video page through the Interfaces IP of AFeth1 port plus the corresponding port

Effective troubleshooting steps

  1. AF bidirectional mapping has been done, and the relevant ports have been tested to be normal, but when logging in through the client, it prompts that Network has timed out. Changing the full port mapping and opening direct pass still works.
  2. By capturing packets, we can see that AF performs Bidirectional NAT, the mapped data packets are forwarded normally, and the internal and external network port packets are completely consistent. When the detailed Layer 3 of the server is written on the test PC to point to the external network port of AF, and the Source NAT to the IP address of the internal network port of AF for access, the video Monitor is normal. But the customer did not accept this operation.
  3. By using Microsoft_Network_Monitor to capture packets, it is found that in addition to directly accessing the 10.10.10.10 IP address of the mapped AF external network port, the client also requests the IP Address of the real server. As shown below
  4. It is recommended to contact the server manufacturer (Dongfang Netcom Video) to make adjustments.

Root cause

After mapping, the Services connecting to the server needs to modify the parameter Info, as shown below

solution

After modifying the corresponding information on the client, the client can connect to the server normally and the video can be viewed normally.

Troubleshooting content

Microsoft_Network_Monitor.rar (13.48 MB)

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=1393&isOpen=true