Problem with ip nat pool configuration not deletable

Product Discussions ADC - Application Delivery
, ,
1

Hi Everyone
We have a problem with our TH1030S cluster(two TH1030S, VRRP-A and VCS).
Advanced Core OS (ACOS) version 4.1.4-GR1, build 78 .

I can’t erase the following ip nat pool configuration.

ip nat pool 172.17.12.0 172.17.12.11 172.17.12.30 netmask /24

#no ip nat pool 172.17.12.0
NAT pool is in use. Try again after all resources are freed.

When I run the “show ip nat pool statistics” command on the vMaster side, Port Usage comes up as 1.
On the vBlade side it is 0.

(vMaster)# show ip nat pool statistics

Pool        Address         Port Usage  Total Used  Total Freed Failed      
-------------------------------------------------------------------------------
172.17.12.0 172.17.12.11    1           0           0           0           
            172.17.12.12    0           0           0           
            172.17.12.13    0           0           0           
            172.17.12.14    0           0           0           
            172.17.12.15    0           0           0           
            172.17.12.16    0           0           0           
            172.17.12.17    0           0           0           
            172.17.12.18    0           0           0           
            172.17.12.19    0           0           0           
            172.17.12.20    0           0           0           
            172.17.12.21    0           0           0           
            172.17.12.22    0           0           0           
            172.17.12.23    0           0           0           
            172.17.12.24    0           0           0           
            172.17.12.25    0           0           0           
            172.17.12.26    0           0           0           
            172.17.12.27    0           0           0           
            172.17.12.28    0           0           0           
            172.17.12.29    0           0           0           
            172.17.12.30    0           0           0

The “interface ve” configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).
And all other configuration related to 172.17.12.0/24 have also been deleted.

How do I remove the “ip nat pool” configuration?

2

Hi Teru,
Can you try to clear all sessions for that source IP with this command and then attempt removing the NAT pool?

clear session ipv4 source-v4-addr source-v4-addr 172.17.12.11

If you still are unable to remove the pool, a reboot may be required to clear the hung session and to free the NAT resource.

3

Thank you very much for your advice, mdunn.

I immediately tried that command, but the session was not released.

clear session ipv4 source-v4-addr 172.17.12.11

and

clear session ipv4 dest-v4-addr 172.17.12.11

and

clear session filter 172.17.12.0

From these results, it seems that reboot is the only way to go.

4

Hello
Clear ip nat translations forced should then allow you to delete the pool, Or you could just disable nat in the interfaces then delete the pool?

5

Thank you very much for your advice, jacksondoe.
The “interface ve” configuration does not have any IPs associated with 172.17.12.0/24 (they have already been deleted).
And all other configuration related to 172.17.12.0/24 have also been deleted.