Description

In an active/passive SRX cluster you may see duplicates of the following NAT syslog messages from an SRX chassis cluster.

 

RT_SRC_NAT_PBA_ALLOC_LS

RT_SRC_NAT_PBA_RELEASE_LS

Solution

Both nodes of the SRX are designed to generate these log messages. In an A/A setup, the ports will be different per node and so each node will send a separate log for the respective port assignment.

 

In an A/P setup, the port pool is shared and so these will arrive as redundant syslog messages.

 

The cluster can be set to send only from the active node with the following configuration knob:

 

set security nat source pool <pool-name> port block-allocation log on_primary_node

Modification History

2024-11-29 : Article Created