Hi,

i have some problem with natting in an mpls switched vpn environment
and one router to the internet at the main site. Here is the environment:

site 1 - main site
192.168.10.1 - router for vpn to site 2, 3 and 4
192.168.10.2 - netware 6.5 server
192.168.10.3 - netware 6.5 server with mail
192.168.10.4 - netware 6.5 server with bordermanager ( 2nics)
195.12.1.37 - router for internet access

bm config:
private bm interface: 192.168.10.4
public bm interface: 195.12.1.38
public bm interface: 195.12.2.40 (same physical as for 1.38)
secondary ips: 195.12.2.41
195.12.2.42
195.12.2.43
195.12.2.44
default gateway: 195.12.1.37
static routes to: 192.168.11.0, next hop 192.168.10.1
192.168.12.0, next hop 192.168.10.1
192.168.13.0, next hop 192.168.10.1
one to one natting 192.168.10.3 <-> 195.12.2.41
192.168.11.2 <-> 195.12.2.42
192.168.12.2 <-> 195.12.2.43
192.168.13.2 <-> 195.12.2.44
static natting enabled, for testing also static and dynamic enabled.

site 2
192.168.11.1 - router for vpn to site 1, 3 and 4
192.168.11.2 - netware 6.5 server
gateway defined = 192.168.11.1

site 3
192.168.12.1 - router for vpn to site 1, 2, and 4
192.168.12.2 - netware 6.5 server
gateway defined = 192.168.12.1

site 4
192.168.13.1 - router for vpn to site 1, 2, and 3
192.168.13.2 - netware 6.5 server
gateway defined = 192.168.13.1

This works for approx. 2 hours up to 1 day. I will have internet access
to the servers at sites 2, 3 and 4. Then i think the paths will go away...
And not always for the same servers. Sometimes the connections for servers
at site 2 and 3 were gone, the other time the connections to servers at
site 2 and 4 - not reproducable.
Access to ALL Servers at the main sites are always OK and stable.
If the connections go away, i also will not be able to ping to the
internet from the servers, which are not reachable.

If this all happens, i will to have to delete the ip binding for
195.12.1.38 and rebind the binding. Then it will be OK for a short time.

Does anyone have an idea ?

Thanks in advance !
Bernd Gierden