Where the PAT (Port Address Translation) can be configured
All Replies
-
Hi @mipecAG
Theoretically, USG will dynamically assign the port which is unoccupied when doing NAPT behavior. And we can’t configure a specific range to dynamic ports.
According to your situation, there are some points we need to clarify:
(1). What USG model and firmware version you are using now?
(2). Does this phenomenon appear often?
(3). What kind of action of host lead to this phenomenon?
(4). If the dynamic port change to 1040 or 10xx for a while, will it change to the higher range 49152 ..65535 again?
You can refer to the following link tutorial use USB to log traffic syslog.
That will help you to check your dynamic port number of historical traffic.
https://community.zyxel.com/en/discussion/4134/log-and-backup-to-usb
select Network category.
The traffic log will be logged.
Thanks.0 -
Are you telling about the source port for outgoing connections? The USG will try not to change the source port when sending out the WAN.
Your ISP might be changing the source port?
If you do a packet capture in the USG for LAN and WAN load up some pages then compare the source port before and after NAT.
0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight