UAG Series User’s Guide
572
C
H A P T E R
5 0
Packet Flow Explore
50.1 Overview
Use this to get a clear picture on how the UAG determines where to forward a packet and how to
change the source IP address of the packet according to your current settings. This function
provides you a summary of all your routing and SNAT settings and helps troubleshoot any related
problems.
50.1.1 What You Can Do in this Chapter
• Use the
Routing Status
screen (see
) to view the overall routing flow
and each routing function’s settings.
• Use the
SNAT Status
screen (see
) to view the overall source IP
address conversion (SNAT) flow and each SNAT function’s settings.
50.2 The Routing Status Screen
The
Routing Status
screen allows you to view the current routing flow and quickly link to specific
routing settings. Click a function box in the
Routing Flow
section, the related routes (activated)
will display in the
Routing Table
section. To access this screen, click
Maintenance
>
Packet
Flow Explore
.
The order of the routing flow may vary depending on whether you:
• select
use policy route to override direct route
in the
CONFIGURATION > Network >
Routing > Policy Route
screen.
• use policy routes to control 1-1 NAT by using the
policy control-virtual-server-rules
activate
command.
• select
use policy routes to control dynamic IPSec rules
in the
CONFIGURATION > VPN >
IPSec VPN > VPN Connection
screen.
Note: Once a packet matches the criteria of a routing rule, the UAG takes the
corresponding action and does not perform any further flow checking.