[c-nsp] Nat Virtual Interface

Ryan West rwest at zyedge.com
Mon Aug 24 19:01:01 EDT 2009


s ip nat nvi trans

Sent from handheld.

On Aug 24, 2009, at 6:44 PM, "Andy Saykao" <andy.saykao at staff.netspace.net.au 
 > wrote:

> Are we suppose to be able to view the nat translations taking place  
> when
> using a NAT Virtual Interface.
>
> Here's me pinging google using a NVI, but I can't see any NAT
> translations taking place???? The translation must be taking place
> because my PC has address of 192.168.2.2 (gets natted to 210.15.230.x)
> and I'm getting replies from google.
>
> test-mpls-cr#sh ip cache flow | inc 66.102.11.99
> Gi0/0.11      66.102.11.99    Gi0/0.11      210.15.230.x   01 0000  
> 0000
> 23
> Gi0/0.11      192.168.2.2     Gi0/0.904     66.102.11.99    01 0000 0800
> 23
>
> test-mpls-cr#sh ip nat trans
> Pro Inside global         Inside local          Outside local
> Outside global
>
> test-mpls-cr#sh ip nat trans global
> Pro Inside global         Inside local          Outside local
> Outside global
>
> test-mpls-cr#sh ip nat trans vrf NSTEST
> Pro Inside global         Inside local          Outside local
> Outside global
>
> test-mpls-cr#sh ip nat stat
> Total active translations: 0 (0 static, 0 dynamic; 0 extended)
> Peak translations: 0, occurred 16:02:21 ago
> Outside interfaces:
> Inside interfaces:
> Hits: 0  Misses: 0
> CEF Translated packets: 0, CEF Punted packets: 0
> Expired translations: 0
> Dynamic mappings:
> -- Outside Destination
> [Id: 1] access-list NSTEST-NAT-ACL pool NSTEST-NAT-POOL refcount 22
> pool NSTEST-NAT-POOL: netmask 255.255.255.252
>        start 210.15.230.x end 210.15.230.x
>        type generic, total addresses 1, allocated 1 (100%), misses 0
> Appl doors: 0
> Normal doors: 0
> Queued Packets: 0
>
> This is on a Cisco 7301 running 12.4(24)T1
>
> Thanks.
>
> Andy
>
> This email and any files transmitted with it are confidential and  
> intended
> solely for the use of the individual or entity to whom they are  
> addressed.
> Please notify the sender immediately by email if you have received  
> this
> email by mistake and delete this email from your system. Please note  
> that
> any views or opinions presented in this email are solely those of the
> author and do not necessarily represent those of the organisation.
> Finally, the recipient should check this email and any attachments for
> the presence of viruses. The organisation accepts no liability for any
> damage caused by any virus transmitted by this email.
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list