Managing NAT

This section provides tips and guidelines for managing Novell^® BorderManager^® 3.7 Network Address Translation (NAT) on your server. The primary means of managing NAT is to monitor NAT functionality. To monitor NAT functionality, verify the following:

• TCP/IP routing and connectivity is established. You can test IP connectivity using the LOAD PING command at the server console.
• NAT is enabled on the public interface. You can check whether NAT is enabled in NIASCFG.
• TCP/IP is bound to more than one interface. You can check the bindings in NIASCFG.
• Filters are not blocking outgoing packets. You can verify the configured filters using FILTCFG.
• Entries in the Static NAT Table are correct.
• Load TCPIP.NLM and then issue the SET TCPIP DEBUG=1 command:
  • The NAT server is receiving incoming packets.
  • The correct address translation is performed.
  • Discarded packets are not displayed on the console screen.
  • The connection is not being reset by the NAT router.

• TCP reset packets (RSTs) are not displayed on LAN traces.