Dynamic IP and Port - Session Browser s2c

[DForde]

Hi All,

Firstly many thanks for checking out my query.

I have a virtual router that has an ISP connection. This ISP has assigned us a /30. I have configured an interface on the FW with the designated add from the /30, this address is used to NAT our clients to access the Internet using dynamic ip-and-port (nat overload). The internal client subnet is a /24 where clients are statically assigned IP addresses. The clients IP address config (incl. public DNS) is correct. The unusual thing is, for some client IP addresses in this scope (e.g) 192.168.0.2, can access the Internet without any issues, I can see on the session browser on the FW that the flow 2 s2c destination add is that of our Dynamic IP and Port address, however, when I assign another IP address to this client e.g. 192.168.0.13 the  flow 2 s2c destination add is that of the ISPs side of the /30 subnet we were issued. 

I am a little bit confused as to why this is happening? Could it be an ISP issue?

Any responses are welcome and appreciated.

Thanks.

[DForde · Accepted solution]

Hi Guys,

sorted the problem .... a configuration issue on my side.🙃

many thanks for looking at the post.