Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

[AF] New architecture Link State Detection failure: the reply packet matches the full mapping

Posted
Updated
Byadmin
Views2

Problem Description

AF8.0.69, configured Link State Detection to display faults

Warning Info

Effective troubleshooting steps

  1. Check the Interfaces configuration. The Interfaces address is in the same Network Segment as the detection address. The external network port is configured with a gateway. The detection address is the gateway address.


2. Check Layer 3. The Layer 3 is normal and there is a Policies routing pointing to the public networkLayer 3


3. Capture packets at the external network port. AF has received the reply packets normally.

  1. Check the NAT conversion configuration and find that the corresponding Interfaces address is configured with full mapping. The link detection request initiated by the device itself matches the destination address mapping and is forwarded to the intranet. Adjust the full mapping of the corresponding address, and Link State Detection is normal.

Root cause

The corresponding Interfaces address is configured with full mapping, and the link detection request initiated by the device itself matches the destination address mapping and is forwarded to the intranet.

solution

  1. Adjust the mapping of the corresponding address and do not perform full mapping, and Link State Detection will be normal.
  2. Upgrading to 8.0.75 has optimized this issue

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=2036&isOpen=true