[c-nsp] Nat Virtual Interface

Andy Saykao andy.saykao at staff.netspace.net.au
Mon Aug 24 18:39:40 EDT 2009


Are we suppose to be able to view the nat translations taking place when
using a NAT Virtual Interface.

Here's me pinging google using a NVI, but I can't see any NAT
translations taking place???? The translation must be taking place
because my PC has address of 192.168.2.2 (gets natted to 210.15.230.x)
and I'm getting replies from google.

test-mpls-cr#sh ip cache flow | inc 66.102.11.99
Gi0/0.11      66.102.11.99    Gi0/0.11      210.15.230.x   01 0000 0000
23
Gi0/0.11      192.168.2.2     Gi0/0.904     66.102.11.99    01 0000 0800
23

test-mpls-cr#sh ip nat trans
Pro Inside global         Inside local          Outside local
Outside global

test-mpls-cr#sh ip nat trans global
Pro Inside global         Inside local          Outside local
Outside global

test-mpls-cr#sh ip nat trans vrf NSTEST
Pro Inside global         Inside local          Outside local
Outside global

test-mpls-cr#sh ip nat stat
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Peak translations: 0, occurred 16:02:21 ago
Outside interfaces:
Inside interfaces:
Hits: 0  Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0
Expired translations: 0
Dynamic mappings:
-- Outside Destination
[Id: 1] access-list NSTEST-NAT-ACL pool NSTEST-NAT-POOL refcount 22
 pool NSTEST-NAT-POOL: netmask 255.255.255.252
        start 210.15.230.x end 210.15.230.x
        type generic, total addresses 1, allocated 1 (100%), misses 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0

This is on a Cisco 7301 running 12.4(24)T1

Thanks.

Andy

This email and any files transmitted with it are confidential and intended
 solely for the use of the individual or entity to whom they are addressed. 
Please notify the sender immediately by email if you have received this 
email by mistake and delete this email from your system. Please note that
 any views or opinions presented in this email are solely those of the
 author and do not necessarily represent those of the organisation. 
Finally, the recipient should check this email and any attachments for 
the presence of viruses. The organisation accepts no liability for any 
damage caused by any virus transmitted by this email.



More information about the cisco-nsp mailing list