Verifying NAT Configuration on SRX–series Services Gateways

The NAT trace options hierarchy configures trace file and flags for verification purposes. SRX-series devices have two main components. Those are the Routing Engine (RE) and the Packet Processing Engine (PFE). The PFE is divided into the ukernel portion and the real-time portion. For verification, you can turn on flags individually to debug NAT functionality on the RE, ukernel PFE, or real-time PFE.

Note: The trace data is written to/var/log/security-trace by default.