Re: ASR1001-X need to reboot frequently to restore internet connectivi

Pranab Bharali · ‎07-28-2022

One ASR1001-X router having IOS 16.12.05 need to reboot to restore internet connectivity for user .Zone based firewall is configured for security with IPSEC .NAT overload is configured . Please let me know if you want any tech logs .

MHM Cisco World · ‎07-28-2022

show ip nat statistics

share this

Pranab Bharali · ‎07-28-2022

Please find the required output :

#sh ip nat statistics
Total active translations: 15645 (0 static, 15645 dynamic; 15645 extended)
Outside interfaces:
GigabitEthernet0/0/1
Inside interfaces:
GigabitEthernet0/0/0, GigabitEthernet0/0/2
Hits: 144659407 Misses: 1328198
Expired translations: 1309853
Dynamic mappings:
-- Inside Source
[Id: 1] access-list LAN_TO_INTERNET_TRAFFIC interface GigabitEthernet0/0/1 refcount 15645
nat-limit statistics:
max entry: max allowed 0, used 0, missed 0
In-to-out drops: 0 Out-to-in drops: 94687
Pool stats drop: 0 Mapping stats drop: 0
Port block alloc fail: 0
IP alias add fail: 0
Limit entry add fail: 0
Outside global interfaces count: 1
#

marce1000 · ‎07-28-2022

- Check logs on the ASR when internet connectivity when internet connection gets lost or preferable use and configure a syslog-server, then observe logging before the problems start appearing too.

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Pranab Bharali · ‎08-01-2022

I just checked the syslog , couldn't found any relevant logs .

MHM Cisco World · ‎07-28-2022

https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/210869-ASR1k-NAT-intermittently-fails-to-transl.html

this is not solution or suggestion but check this article

Leo Laohoo · ‎07-28-2022

@Pranab Bharali wrote:
One ASR1001-X router having IOS 16.12.05 need to reboot to restore internet connectivity for user

Is there a reason why this needs to be done?
Before rebooting, what does the log say?

Pranab Bharali · ‎07-31-2022

During the outage we checked the NAT configuration ,ZBS configuration and found OK . Removed and re-apply the same, finally rebooted to bring back the services . However the past logs was not captured .

MHM Cisco World · ‎08-01-2022

how you check NAT?

ASR1001-X need to reboot frequently to restore internet connectivity