Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Monitoring NAT

This section contains the following topics:

Monitoring Source NAT Information

Purpose

Display configured information about source Network Address Translation (NAT) rules, pools, persistent NAT, and paired addresses.

Action

Select Monitor>NAT>Source NAT in the J-Web user interface, or enter the following CLI commands:

  • show security nat source summary
  • show security nat source pool pool-name
  • show security nat source persistent-nat-table
  • show security nat source paired-address

Table 1 describes the available options for monitoring source NAT.

Table 1: Source NAT Monitoring Page

Field

Description

Action

Rules

Rule-set Name

Displays the rule-sets configured in the system.

Select all rule sets or a specific rule set to display from the list.

Total rules

Displays the total number of configured rules.

ID

Displays the rule identification number.

Name

Displays the name of the source NAT rule.

Ruleset Name

Displays the name of the source NAT rule set.

From

Displays the zone, routing instance, or interface from which the packets flow.

To

Displays the zone, routing instance, or interface to which the packets flow.

Source address range

Displays the source IP address range.

Destination address range

Displays the destination IP address range.

Ip protocol

Displays the IP protocol.

Action

Action taken in regard to a packet that matches a rule.

Persistent NAT type

Displays the persistent NAT type.

Inactivity timeout

Displays inactivity timeout interval for the persistent NAT binding.

Max session number

Displays the maximum number of sessions.

Translation hits

Displays the number of translation hits.

Pools

Pool Name

Displays the names of the pools configured in the system.

Select all pools or a specific pool to display from the list.

Total Pools

Displays the total number of source pools configured in the system.

ID

Displays the identification number of the source pool.

Name

Displays the name of the source pool.

Address range

Displays the IP address or IP address range of the source pool.

Single/Twin ports

Displays the number of allocated single and twin ports.

Port

Displays the port numbers used for the source pool.

Address assignment

Displays the type of address assignment.

Port overloading factor

Displays the port overloading capacity.

Routing instance

Displays the name of the routing instance.

Total addresses

Displays the number of IP addresses that are in use.

Host address base

Displays the base address of the original source IP address range.

Translation hits

Displays the number of translation hits.

Persistent NAT
Persistent NAT table statistics

FPC PIC ID

Displays the identification number of the Flexible PIC Concentrator (FPC).

binding total

Displays the total number of persistent NAT bindings for the FPC.

binding in use

Displays the number of persistent NAT bindings that are in use for the FPC.

enode total

Displays the total number of persistent NAT enodes for the FPC.

enode in use

Displays the number of persistent NAT enodes that are in use for the FPC.

Persistent NAT table

Source NAT pool

Displays the names of the pools configured in the system.

Select all pools or a specific pool to display from the list.

Internal IP

Displays the internal IP addresses configured in the system.

Select all IP addresses or a specific IP address to display from the list.

Internal port

Displays the internal ports configured in the system.

Select the port to display from the list.

Internal protocol

Displays the internal protocols configured in the system.

Select all protocols or a specific protocol to display from the list.

Internal IP

Displays the internal transport IP address of the outgoing session from internal to external.

Internal port

Displays the internal transport port number of the outgoing session from internal to external.

Internal protocol

Displays the internal protocol of the outgoing session from internal to external.

Reflective IP

Displays the translated IP address of the source IP address.

Reflective port

Displays the translated number of the port.

Reflective protocol

Displays the translated protocol.

Source NAT pool

Displays the name of the source NAT pool where persistent NAT is used.

Type

Displays the persistent NAT type.

Left time/Conf time

Displays the inactivity timeout period that remains and the configured timeout value.

Current session num/Max session num

Displays the number of current sessions associated with the persistent NAT binding and the maximum number of sessions.

Source NAT rule

Displays the name of the source NAT rule to which this persistent NAT binding applies.

External node table

Internal IP

Displays the internal transport IP address of the outgoing session from internal to external.

Internal port

Displays the internal port number of the outgoing session from internal to external.

External IP

Displays the external IP address of the outgoing session from internal to external.

External port

Displays the external port of the outgoing session from internal to external.

Zone

Displays the external zone of the outgoing session from internal to external.

Paired Address

Pool name

Displays the names of the pools that contain paired IP addresses.

Select all pools or a specific pool to display from the list.

Specified Address

Displays the IP address types.

Select the IP address type to display; then enter the IP address.

Pool name

Displays the selected pools that contain paired IP addresses.

Internal address

Displays the internal IP address.

External address

Displays the external IP address.

Monitoring Destination NAT Information

Purpose

View the destination Network Address Translation (NAT) summary table and the details of the specified NAT destination address pool information.

Action

Select Monitor>NAT>Desitnation NAT in the J-Web user interface, or enter the following CLI commands:

  • show security nat destination summary
  • show security nat destination pool pool-name

Table 2 summarizes key output fields in the destination NAT display.

Table 2: Summary of Key Destination NAT Output Fields

Field

Values

Additional Information

Destination NAT Rules Filter Options

Rule-Set Name

Name of the rule set.

Total Rules

Total rules available.

Destination NAT Rules Tab Options

ID

ID of the rule.

Name

Name of the rule .

Ruleset Name

Name of the ruleset.

From

Name of the routing instance/zone/interface from which the packet flows.

To

Name of the routing instance/zone/interface to which the packet flows .

Source Address Range

Source IP address range in the source pool.

Destination Address Range

Destination IP address range in the source pool.

Action

Action configured for the destination NAT rules.

Destination Port

Destination port in the destination pool.

Translation Hits

Number of times the router translates two components in the IP header of the incoming packet.

Pools Filter Option

Pool Name

Drop-down box for selecting the pool name to be displayed.

Total Pools

Total pools added.

Pools Tab Option

ID

ID of the pool.

Name

Name of the destination pool.

Address Range

IP address range in the destination pool.

Port

Destination port number in the pool.

Routing Instance

Name of the routing instance.

Total Addresses

Total IP address, IP address set, or address book entry.

Translation Hits

Number of times a translation in the translation table is used for destination NAT.

Address High

Ending IP address of one address range in the source pool.

Top 10 Translation Hits

Graph

Displays the graph of top 10 translation hits.

Monitoring Static NAT Information

Purpose

View static NAT rule information.

Action

Select Monitor>NAT>Static NAT in the J-Web user interface, or enter the following CLI command:

show security nat static rule

Table 3 summarizes key output fields in the static NAT display.

Table 3: Summary of Key Static NAT Output Fields

Field

Values

Additional Information

Rule Filter Option

Rule-Set Name

Filter to sort rules by name.

Total Rules

Number of rules configured.

Rule Tab Option

ID

Rule ID number.

Position

Name

Name of the rule.

Rule set Name

Name of the rule set.

From

Name of the routing instance/interface/zone from which the packet comes

Destination Address

Destination IP address and subnet mask.

Host Address

Host IP address and subnet mask mapped to the destination IP address and subnet mask.

Netmask

Subnet IP address.

Host Routing Instance

Name of the routing instance from which the packet comes.

Translation Hits

Number of times a translation in the translation table is used for a static NAT rule.

Monitoring Incoming Table Information

Purpose

View NAT table information.

Action

Select Monitor>NAT>Incoming Table in the J-Web user interface, or enter the following CLI command:

show security nat incoming-table

Table 4 summarizes key output fields in the incoming table display.

Table 4: Summary of Key Incoming Table Output Fields

Field

Values

Additional Information

Statistics

In use

Number of entries in the NAT table.

Maximum

Maximum number of entries possible in the NAT table.

Entry allocation failed

Number of entries failed for allocation.

Incoming Table

Clear

Destination

Destination IP address and port number.

Host

Host IP address and port number that the destination IP address is mapped to.

References

Number of sessions referencing the entry.

Timeout

Timeout, in seconds, of the entry in the NAT table.

Source-pool

Name of source pool where translation is allocated.

Monitoring Interface NAT Port Information

Purpose

View port usage for an interface source pool information.

Action

Select Monitor>Firewall/NAT>Interface NAT in the J-Web user interface, or enter the following CLI command:

  • show security nat interface-nat-ports

Table 5 summarizes key output fields in the interface NAT display.

Table 5: Summary of Key Interface NAT Output Fields

Field

Values

Additional Information

Interface NAT Summary Table

Pool Index

Port pool index.

Total Ports

Total number of ports in a port pool.

Single Ports Allocated

Number of ports allocated one at a time that are in use.

Single Ports Available

Number of ports allocated one at a time that are free for use.

Twin Ports Allocated

Number of ports allocated two at a time that are in use.

Twin Ports Available

Number of ports allocated two at a time that are free for use.

Published: 2014-12-07