[c-nsp] Nat Virtual Interface
Ryan West
rwest at zyedge.com
Mon Aug 24 19:01:01 EDT 2009
s ip nat nvi trans
Sent from handheld.
On Aug 24, 2009, at 6:44 PM, "Andy Saykao" <andy.saykao at staff.netspace.net.au
> wrote:
> Are we suppose to be able to view the nat translations taking place
> when
> using a NAT Virtual Interface.
>
> Here's me pinging google using a NVI, but I can't see any NAT
> translations taking place???? The translation must be taking place
> because my PC has address of 192.168.2.2 (gets natted to 210.15.230.x)
> and I'm getting replies from google.
>
> test-mpls-cr#sh ip cache flow | inc 66.102.11.99
> Gi0/0.11 66.102.11.99 Gi0/0.11 210.15.230.x 01 0000
> 0000
> 23
> Gi0/0.11 192.168.2.2 Gi0/0.904 66.102.11.99 01 0000 0800
> 23
>
> test-mpls-cr#sh ip nat trans
> Pro Inside global Inside local Outside local
> Outside global
>
> test-mpls-cr#sh ip nat trans global
> Pro Inside global Inside local Outside local
> Outside global
>
> test-mpls-cr#sh ip nat trans vrf NSTEST
> Pro Inside global Inside local Outside local
> Outside global
>
> test-mpls-cr#sh ip nat stat
> Total active translations: 0 (0 static, 0 dynamic; 0 extended)
> Peak translations: 0, occurred 16:02:21 ago
> Outside interfaces:
> Inside interfaces:
> Hits: 0 Misses: 0
> CEF Translated packets: 0, CEF Punted packets: 0
> Expired translations: 0
> Dynamic mappings:
> -- Outside Destination
> [Id: 1] access-list NSTEST-NAT-ACL pool NSTEST-NAT-POOL refcount 22
> pool NSTEST-NAT-POOL: netmask 255.255.255.252
> start 210.15.230.x end 210.15.230.x
> type generic, total addresses 1, allocated 1 (100%), misses 0
> Appl doors: 0
> Normal doors: 0
> Queued Packets: 0
>
> This is on a Cisco 7301 running 12.4(24)T1
>
> Thanks.
>
> Andy
>
> This email and any files transmitted with it are confidential and
> intended
> solely for the use of the individual or entity to whom they are
> addressed.
> Please notify the sender immediately by email if you have received
> this
> email by mistake and delete this email from your system. Please note
> that
> any views or opinions presented in this email are solely those of the
> author and do not necessarily represent those of the organisation.
> Finally, the recipient should check this email and any attachments for
> the presence of viruses. The organisation accepts no liability for any
> damage caused by any virus transmitted by this email.
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
More information about the cisco-nsp
mailing list