Problem with ip nat pool configuration not deletable
teru
Member ✭
Hi Everyone
We have a problem with our TH1030S cluster(two TH1030S, VRRP-A and VCS).
Advanced Core OS (ACOS) version 4.1.4-GR1, build 78 .
I can't erase the following ip nat pool configuration.
ip nat pool 172.17.12.0 172.17.12.11 172.17.12.30 netmask /24
```
#no ip nat pool 172.17.12.0
NAT pool is in use. Try again after all resources are freed.
```
When I run the "show ip nat pool statistics" command on the vMaster side, Port Usage comes up as 1.
On the vBlade side it is 0.
```
(vMaster)# show ip nat pool statistics
Pool Address Port Usage Total Used Total Freed Failed
-------------------------------------------------------------------------------
172.17.12.0 172.17.12.11 1 0 0 0
172.17.12.12 0 0 0
172.17.12.13 0 0 0
172.17.12.14 0 0 0
172.17.12.15 0 0 0
172.17.12.16 0 0 0
172.17.12.17 0 0 0
172.17.12.18 0 0 0
172.17.12.19 0 0 0
172.17.12.20 0 0 0
172.17.12.21 0 0 0
172.17.12.22 0 0 0
172.17.12.23 0 0 0
172.17.12.24 0 0 0
172.17.12.25 0 0 0
172.17.12.26 0 0 0
172.17.12.27 0 0 0
172.17.12.28 0 0 0
172.17.12.29 0 0 0
172.17.12.30 0 0 0
```
The "interface ve" configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).
And all other configuration related to 172.17.12.0/24 have also been deleted.
How do I remove the "ip nat pool" configuration?
Comments
Hi Teru,
Can you try to clear all sessions for that source IP with this command and then attempt removing the NAT pool?
If you still are unable to remove the pool, a reboot may be required to clear the hung session and to free the NAT resource.
Thank you very much for your advice, mdunn.
I immediately tried that command, but the session was not released.
and
and
If you still are unable to remove the pool, a reboot may be required to clear the hung session and to free the NAT resource.
From these results, it seems that reboot is the only way to go.
Hello
Clear ip nat translations forced should then allow you to delete the pool, Or you could just disable nat in the interfaces then delete the pool?
Thank you very much for your advice, jacksondoe.
The "interface ve" configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).
And all other configuration related to 172.17.12.0/24 have also been deleted.