Home
  •  

NAT failure

NAT_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack

Summary

Network Address Translation (NAT) protocol encountered a configuration error.

 

Causes

The most common reasons for this error are:

1.     Internet Connection Sharing (ICS) is enabled on a connection.

2.     The protocol was unable to expand one or more wildcard mappings.

 

Resolutions

1.     Disable Internet Connection Sharing (ICS) in the Network Connections folder, and then stop and restart the Routing and Remote Access service.

2.     Verify the configuration of the NAT component.

3.     If the server is low on memory, take appropriate action to increase the available memory. See Help and Support Center for information on low memory.

 

Sample Event

Sample Event#1: The Network Address Translator (NAT) was unable to update the local address-resolution table to respond to requests for IP address %1 and mask %2.Address-resolution may fail to operate for addresses in the given range. This error may indicate a problem with TCP/IP networking, or it may indicate lack of support for address-resolution in the underlying network interface. The data is the error code.
Sample Event#2: The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
Sample Event#3: The Network Address Translator (NAT) was unable to load the kernel-mode translation module. The data is the error code.
Sample Event#4: The Internet Connection Sharing service could not start because another process has taken control of the kernel-mode translation module. This may occur when the Connection Sharing component has been installed in the Routing and Remote Access Manager. If this is the case, please remove the Connection Sharing component and restart the Internet Connection Sharing service.
Sample Event#5: The Connection Sharing component could not start because another process has taken control of the kernel-mode translation module. This may occur when Internet Connection Sharing has been enabled for a connection. If this is the case, please disable Internet Connection Sharing for the connection in the Network Connections folder and then restart Routing and Remote Access.
Sample Event#6: The Network Address Translator (NAT) was unable to expand the wildcard mappings. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.

 

© 2004 Microsoft Corporation, all rights reserved.

 

Element properties:

TargetMicrosoft.Windows.Server.RRAS.2008.Server
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="NAT_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.Server.RRAS.2008.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(32001|32003|32004|32006|32007|32008)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>SharedAccess_NAT|ipnathlp</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

  </WriteActions>

</Rule>