Problem with ip nat pool configuration not deletable

Hi Everyone

We have a problem with our TH1030S cluster(two TH1030S, VRRP-A and VCS).

Advanced Core OS (ACOS) version 4.1.4-GR1, build 78 .


I can't erase the following ip nat pool configuration.


ip nat pool 172.17.12.0 172.17.12.11 172.17.12.30 netmask /24


```

#no ip nat pool 172.17.12.0

NAT pool is in use. Try again after all resources are freed.

```


When I run the "show ip nat pool statistics" command on the vMaster side, Port Usage comes up as 1.

On the vBlade side it is 0.


```

(vMaster)# show ip nat pool statistics


Pool        Address         Port Usage  Total Used  Total Freed Failed      

-------------------------------------------------------------------------------

172.17.12.0 172.17.12.11    1           0           0           0           

            172.17.12.12    0           0           0           

            172.17.12.13    0           0           0           

            172.17.12.14    0           0           0           

            172.17.12.15    0           0           0           

            172.17.12.16    0           0           0           

            172.17.12.17    0           0           0           

            172.17.12.18    0           0           0           

            172.17.12.19    0           0           0           

            172.17.12.20    0           0           0           

            172.17.12.21    0           0           0           

            172.17.12.22    0           0           0           

            172.17.12.23    0           0           0           

            172.17.12.24    0           0           0           

            172.17.12.25    0           0           0           

            172.17.12.26    0           0           0           

            172.17.12.27    0           0           0           

            172.17.12.28    0           0           0           

            172.17.12.29    0           0           0           

            172.17.12.30    0           0           0


```


The "interface ve" configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).

And all other configuration related to 172.17.12.0/24 have also been deleted.


How do I remove the "ip nat pool" configuration?

Comments

  • mdunnmdunn Member ✭✭

    Hi Teru,

    Can you try to clear all sessions for that source IP with this command and then attempt removing the NAT pool?

    clear session ipv4 source-v4-addr source-v4-addr 172.17.12.11
    

    If you still are unable to remove the pool, a reboot may be required to clear the hung session and to free the NAT resource.

  • teruteru Member

    Thank you very much for your advice, mdunn.


    I immediately tried that command, but the session was not released.


    clear session ipv4 source-v4-addr 172.17.12.11
    

    and

    clear session ipv4 dest-v4-addr 172.17.12.11
    

    and

    clear session filter 172.17.12.0
    


    If you still are unable to remove the pool, a reboot may be required to clear the hung session and to free the NAT resource.


    From these results, it seems that reboot is the only way to go.

  • jacksondoejacksondoe Member

    Hello

    Clear ip nat translations forced should then allow you to delete the pool, Or you could just disable nat in the interfaces then delete the pool?

  • teruteru Member

    Thank you very much for your advice, jacksondoe.

    The "interface ve" configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).

    And all other configuration related to 172.17.12.0/24 have also been deleted.

Sign In or Register to comment.