Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Outbound NAT sometimes does not work.

0

0

Article ID: KB6353 KB Last Updated: 10 Jun 2010Version: 4.0
Summary:
Outbound NAT sometimes does not work. Running debug flow basic command shows the messages "### The dip set's ifp != requesting ifp!!!"
Symptoms:
Problem Environment:
  • Outbound NAT sometimes does not work.
Symptoms & Errors
  • Debug flow basic command shows the messages "### The dip set's ifp != requesting ifp!!!"
  • Explain the debug message: "### The dip set's ifp != requesting ifp!!!"
Solution:

This error message occurs if the policy specified one dip set (e.g., 4) while the packet was routed to a different interface which has no dip or a different dip set configured.

For example, assume a policy specifies dip 4 for destination zone z2.   z2 has two interfaces, e1 and e2. Interface e1 defines dip id 4 and e2 has no dip assigned to that interface. When a packet is routed to e1, everything is fine. But if a packet is routed to e2, since e2 has no dip defined, the following error message will occur:

### The dip set's ifp !=requesting ifp!!!

Workaround: Make sure the layer-3 routing and interface DIP pool setting match with the corresponding policies.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search