Examples
The following is
sample output from the
show
ip
nat
translations
command. Without overloading, two
inside hosts are exchanging packets with some number of outside hosts.
Router# show ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 10.69.233.209 192.168.1.95 --- ---
--- 10.69.233.210 192.168.1.89 --- --
With overloading,
a translation for a Domain Name Server (DNS) transaction is still active, and
translations for two Telnet sessions (from two different hosts) are also
active. Note that two different inside hosts appear on the outside with a
single IP address.
Router# show ip nat translations
Pro Inside global Inside local Outside local Outside global
udp 10.69.233.209:1220 192.168.1.95:1220 172.16.2.132:53 172.16.2.132:53
tcp 10.69.233.209:11012 192.168.1.89:11012 172.16.1.220:23 172.16.1.220:23
tcp 10.69.233.209:1067 192.168.1.95:1067 172.16.1.161:23 172.16.1.161:23
The following is
sample output that includes the
verbose
keyword:
Router# show ip nat translations verbose
Pro Inside global Inside local Outside local Outside global
udp 172.16.233.209:1220 192.168.1.95:1220 172.16.2.132:53 172.16.2.132:53
create 00:00:02, use 00:00:00, flags: extended
tcp 172.16.233.209:11012 192.168.1.89:11012 172.16.1.220:23 172.16.1.220:23
create 00:01:13, use 00:00:50, flags: extended
tcp 172.16.233.209:1067 192.168.1.95:1067 172.16.1.161:23 172.16.1.161:23
create 00:00:02, use 00:00:00, flags: extended
The following is
sample output that includes the
vrf keyword:
Router# show ip nat translations vrf
abc
Pro Inside global Inside local Outside local Outside global
--- 10.2.2.1 192.168.121.113 --- ---
--- 10.2.2.2 192.168.122.49 --- ---
--- 10.2.2.11 192.168.11.1 --- ---
--- 10.2.2.12 192.168.11.3 --- ---
--- 10.2.2.13 172.16.5.20 --- ---
Pro Inside global Inside local Outside local Outside global
--- 10.2.2.3 192.168.121.113 --- ---
--- 10.2.2.4 192.168.22.49 --- ---
The following is
sample output that includes the
esp keyword:
Router# show ip nat translations esp
Pro Inside global Inside local Outside local Outside global
esp 192.168.22.40:0 192.168.122.20:0 192.168.22.20:0 192.168.22.20:28726CD9
esp 192.168.22.40:0 192.168.122.20:2E59EEF5 192.168.22.20:0 192.168.22.20:0
The following is
sample output that includes the
esp and
verbose
keywords:
Router# show ip nat translation esp verbose
Pro Inside global Inside local Outside local Outside global
esp 192.168.22.40:0 192.168.122.20:0 192.168.22.20:0 192.168.22.20:28726CD9
create 00:00:00, use 00:00:00,
flags:
extended, 0x100000, use_count:1, entry-id:192, lc_entries:0
esp 192.168.22.40:0 192.168.122.20:2E59EEF5 192.168.22.20:0 192.168.22.20:0
create 00:00:00, use 00:00:00, left 00:04:59, Map-Id(In):20,
flags:
extended, use_count:0, entry-id:191, lc_entries:0
The following is
sample output that includes the
inside keyword:
Router# show ip nat translations inside 10.69.233.209
Pro Inside global Inside local Outside local Outside global
udp 10.69.233.209:1220 192.168.1.95:1220 172.16.2.132:53 172.16.2.132:53
The following is
sample output when NAT that includes the
inside keyword:
Router# show ip nat translations inside 10.69.233.209
Pro Inside global Inside local Outside local Outside global
udp 10.69.233.209:1220 192.168.1.95:1220 172.16.2.132:53 172.16.2.132:53
The following is
a sample output that displays information about NAT port parity and
conservation:
Router# show ip nat translations
Pro Inside global Inside local Outside local Outside global
udp 200.200.0.100:5066 100.100.0.56:5066 200.200.0.56:5060 200.200.0.56:5060
udp 200.200.0.100:1025 100.100.0.57:10001 200.200.0.57:10001 200.200.0.57:10001
udp 200.200.0.100:10000 100.100.0.56:10000 200.200.0.56:10000 200.200.0.56:10000
udp 200.200.0.100:1024 100.100.0.57:10000 200.200.0.57:10000 200.200.0.57:10000
udp 200.200.0.100:10001 100.100.0.56:10001 200.200.0.56:10001 200.200.0.56:10001
udp 200.200.0.100:9985 100.100.0.57:5066 200.200.0.57:5060 200.200.0.57:5060
Total number of translations: 6
The table below
describes the significant fields shown in the display.
Table 6. show ip nat translations
Field Descriptions
Field
|
Description
|
Pro
|
Protocol
of the port identifying the address.
|
Inside
global
|
The
legitimate IP address that represents one or more inside local IP addresses to
the outside world.
|
Inside
local
|
The IP
address assigned to a host on the inside network; probably not a legitimate
address assigned by the Network Interface Card (NIC) or service provider.
|
Outside
local
|
IP
address of an outside host as it appears to the inside network; probably not a
legitimate address assigned by the NIC or service provider.
|
Outside
global
|
The IP
address assigned to a host on the outside network by its owner.
|
create
|
How long
ago the entry was created (in hours:minutes:seconds).
|
use
|
How long
ago the entry was last used (in hours:minutes:seconds).
|
flags
|
Indication of the type of translation. Possible flags are:
-
extended--Extended translation
-
static--Static translation
-
destination--Rotary translation
-
outside--Outside translation
-
timing out--Translation will no longer be used, due to a TCP finish (FIN) or
reset (RST) flag.
|