Confirming NAT Translations

Confirming NAT Translations

To see the NAT translations, use the show ip nat translations command. The results would look something like the following output. The translations appear immediately because they’re permanent. An outside user could access these servers by using the 192.168.1.105–107 addresses, assuming no access lists prevent it.

Rtr1#show ip nat translations
Pro Inside global    Inside local    Outside local   Outside global
---  192.168.1.105    10.0.0.201      ---             ---
---  192.168.1.106    10.0.0.202      ---             ---
---  192.168.1.107    10.0.0.203      ---             ---
Rtr1#

To see any NAT activity, use the show ip nat statistics command. The results would look something like the following output. The Total active translations summarizes the current status, while hits and misses indicates no traffic has been attempted. If an outside host were to ping one of the servers, the hits would show the number of packets—four or five.

Rtr1#show ip nat statistics
Total active translations: 3 (3 static, 0 dynamic; 0 extended)
Outside interfaces:
  Serial0/0
Inside interfaces:
  FastEthernet0/0
Hits: 0  Misses: 0
Expired translations: 0
Dynamic mappings:
Rtr1#