UAG5100 User’s Guide
469
C
H A P T E R
4 5
Packet Flow Explore
45.1 Overview
Use this to get a clear picture on how the UAG determines where to forward a packet and how to
change the source IP address of the packet according to your current settings. This function
provides you a summary of all your routing and SNAT settings and helps troubleshoot any related
problems.
45.1.1 What You Can Do in this Chapter
• Use the Routing Status screen (see
) to view the overall routing flow
and each routing function’s settings.
• Use the SNAT Status screen (see
) to view the overall source IP
address conversion (SNAT) flow and each SNAT function’s settings.
45.2 The Routing Status Screen
The Routing Status screen allows you to view the current routing flow and quickly link to specific
routing settings. Click a function box in the Routing Flow section, the related routes (activated)
will display in the Routing Table section. To access this screen, click Maintenance > Packet
Flow Explore.
The order of the routing flow may vary depending on whether you:
• select use policy route to override direct route in the CONFIGURATION > Network >
Routing > Policy Route screen.
• use policy routes to control 1-1 NAT by using the
policy control-virtual-server-rules
activate
command.
• select use policy routes to control dynamic IPSec rules in the CONFIGURATION > VPN >
IPSec VPN > VPN Connection screen.
Note: Once a packet matches the criteria of a routing rule, the UAG takes the
corresponding action and does not perform any further flow checking.
