topic internet problem with PAT in Network Security

internet problem with PAT

s.ermolaev — Tue, 12 Mar 2019 04:39:22 GMT

Users behind the PAT are have problem to access to the internet, to the different sites. The sites are opened are very slowly or not opens. In ASA log i view this one:

Teardown TCP connection 1027324458 for outside: xx.xx.xx.xx/80 to inside: xx.xx.xx.xx/49843 duration 0:00:30 bytes 0 SYN Timeout

But users behind the NAT have not these problems.

Hi, This happens because 3

nkarthikeyan — Wed, 20 Aug 2014 08:58:17 GMT

Hi,

This happens because 3-way handshake process was not able to complete within the timeout limit set on ASA. In general it should not be problem with ASA.... might be the load on to the PAT ip very high... mean the number of translations is more.....

Also make sure that you shouldn't have an overlapping rule in place... PAT and static NAT overlapping....

Regards

Karthik

Maybe this can help someone.

s.ermolaev — Thu, 21 Aug 2014 09:34:36 GMT

Maybe this can help someone. I did failover to another asa, and reload primary, then returned to primary. Now everything is working fine.

Nice to hear that you were

nkarthikeyan — Thu, 21 Aug 2014 10:16:05 GMT

Nice to hear that you were managed to solved the problem. But you can make it sure, when you have the full load and xlate count is very high..... This never happens in a generic circumstance...

Regards

Karthik