Command:

show ip nat translations

Mode:

Router>


Syntax:

show ip nat translations [verbose]


Syntax Description:

verbose

(Optional) Displays additional information for each translation table entry, including how long ago the entry was created and used.

 

Command Description:

To display active Network Address Translation (NAT) translations, use the show ip nat translations EXEC command.


Examples:

The following is a sample of output from the show ip nat translations command. Without overloading, two inside hosts are exchanging packets with some number of outside hosts.

Router#show ip nat translations

Pro Inside global      Inside local       Outside local      Outside global
--- 171.69.233.209     192.168.1.95       ---                ---
--- 171.69.233.210     192.168.1.89       ---                --
 

With overloading, a translation for a DNS transaction is still active, and translations for two Telnet sessions (from two different hosts) are also active. Note that two different inside hosts appear on the outside with a single IP address.

Router#show ip nat translations

Pro Inside global        Inside local       Outside local      Outside global
udp 171.69.233.209:1220  192.168.1.95:1220  171.69.2.132:53    171.69.2.132:53
tcp 171.69.233.209:11012 192.168.1.89:11012 171.69.1.220:23    171.69.1.220:23
tcp 171.69.233.209:1067  192.168.1.95:1067  171.69.1.161:23    171.69.1.161:23
 

The following is a sample of output that includes the verbose keyword.

Router#show ip nat translations verbose

Pro Inside global        Inside local       Outside local      Outside global
udp 171.69.233.209:1220  192.168.1.95:1220  171.69.2.132:53    171.69.2.132:53
        create 00:00:02, use 00:00:00, flags: extended
tcp 171.69.233.209:11012 192.168.1.89:11012 171.69.1.220:23    171.69.1.220:23
        create 00:01:13, use 00:00:50, flags: extended
tcp 171.69.233.209:1067  192.168.1.95:1067  171.69.1.161:23    171.69.1.161:23
        create 00:00:02, use 00:00:00, flags: extended
 

The table describes the significant fields in the display.

Table: show ip nat translationsField Descriptions

Field Description

Pro

Protocol of the port identifying the address

Inside global

The legitimate IP address (assigned by the NIC or service provider) that represents one or more inside local IP addresses to the outside world.

Inside local

The IP address assigned to a host on the inside network; probably not a legitimate address assigned by the NIC or service provider.

Outside local

IP address of an outside host as it appears to the inside network; probably not a legitimate address assigned by the NIC or service provider.

Outside global

The IP address assigned to a host on the outside network by its owner

create

How long ago the entry was created (in hours:minutes:seconds).

use

How long ago the entry was last used (in hours:minutes:seconds).

flags

Indication of the type of translation. Possible flags are:

  •  

  • extended�Extended translation
  • static�Static translation
  • destination�Rotary translation
  • outside�Outside translation
  • timing out�Translation will no longer be used, due to a TCP FIN or RST.

     

 

Misconceptions:
None

Related commands:
clear ip nat translation
ip nat
ip nat inside destination
ip nat inside source
ip nat pool
show ip nat statistics

� Cisco Systems, Inc. 2001, 2002, 2003
World Wide Education

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)