Home
  •  

NAT failure

NAT_failure_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
Network Address Translation (NAT) protocol encountered a configuration error.
 
Causes
The most common reasons for this error are:
  1. Internet Connection Sharing (ICS) has been enabled on a connection.
  2. The protocol was unable to expand wildcard mapping(s).
 
Resolutions
  1. Disable Internet Connection Sharing (ICS) in Network Connections folder and then start the Routing and Remote Access service.
  2. Verify the configuration on NAT.
  3. If the server is low on memory, take appropriate action to increase the available memory. See Help and Support Center for information on low memory.
 
Sample Event
Sample Event#1: The Network Address Translator (NAT) was unable to update thelocal address-resolution table to respond to requests forIP address %1 and mask %2.Address-resolution may fail to operate for addresses in the given range.This error may indicate a problem with TCP/IP networking,or it may indicate lack of support for address-resolutionin the underlying network interface.The data is the error code.
Sample Event#2: The Network Address Translator (NAT) was unable to request an operationof the kernel-mode translation module.This may indicate misconfiguration, insufficient resources, oran internal error.The data is the error code.
Sample Event#3: The Network Address Translator (NAT) was unable to loadthe kernel-mode translation module.The data is the error code.
Sample Event#4: The Internet Connection Sharing service could not start becauseanother process has taken control of the kernel-mode translation module.This may occur when the Connection Sharing component has been installedin the Routing and Remote Access Manager.If this is the case, please remove the Connection Sharing componentand restart the Internet Connection Sharing service.
Sample Event#5: The Connection Sharing component could not start because another processhas taken control of the kernel-mode translation module.This may occur when Internet Connection Sharing has been enabledfor a connection.If this is the case, please disable Internet Connection Sharingfor the connection in the Network Connections folder and thenrestart Routing and Remote Access.
Sample Event#6: The Network Address Translator (NAT) was unable to expand the wildcardmappings.This may indicate misconfiguration, insufficient resources, oran internal error.The data is the error code.
 
© 2004 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Windows.RemoteAccess.2012.Class.VPNServer
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default

Source Code:

<Rule ID="NAT_failure_1_Rule" Enabled="true" Target="Microsoft.Windows.RemoteAccess.2012.Class.VPNServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(32001|32003|32004|32006|32007|32008)$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>SharedAccess_NAT|ipnathlp</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>

  </WriteActions>

</Rule>