show security nat source port-block
Syntax
show security nat source port-block pool-name host-ip host ip address xlated-ip xlated-ip-address xlated-port xlated-port root-logical-system | logical-system {lsys-name | all}
Description
Display the port blocks allocated by the host.
Options
pool-name |
Display the PBA port block table for the specified source pool. |
host ip address |
Display the PBA port block table based on the host IP address. |
xlated ip address |
Display the PBA port block table based on the translated IP address. |
xlated-port |
Display the PBA port block table based on the translated IP address and the translated port information. |
root-logical-system |
Display the PBA port block table for the primary (root) logical system. |
logical-system (lsys-name | all) |
Display information about the specified logical system source NAT pools or all logical system source NAT pools. |
Required Privilege Level
view
Output Fields
The following table lists all possible fields for the show
security nat source port-block
and show
services nat source port-block
commands. The fields
that appear may vary depending on the platform and software
release.
Field Name |
Field Description |
---|---|
Pool name |
Name of pool. |
Port-overloading-factor |
Factor of port overloading for the source pool. |
Port block size |
Number of ports that a port block contains. |
Max port blocks per host |
Maximum number of blocks that one host can use for translation. |
Port block active timeout |
Longest duration that a block remains active for port allocation. |
Used/total port blocks |
Current number of used ports and the total number of ports in this source pool. |
Host IP |
Address of the host IP. |
External IP |
Address of an external IP. |
Port_Block Range |
Port range of one PBA port block entry from the lowest to the highest port number that can be allowed to allocate ports for this block. |
Ports_Used/Ports_Total |
Current number of used ports and total number of ports in this source pool. |
Block_State/Left_Time(s) |
PBA port block entry state for NAT port allocation, including Active, Inactive, Query, and the time left for a port block that is in the Active state or Query state.
|
Last active block recycle timeout |
Amount of time before the last active block is
released when
|
Sample Output (Junos OS)
- show security nat source port-block (SRX Series Firewall)
- show services nat source port-block (MX-SPC3)
- show services nat source port-block (MX240, MX480, and MX960)
show security nat source port-block (SRX Series Firewall)
user@host> show security nat source port-block Pool name: pool1 Port-overloading-factor: 1 Port block size: 10 Max port blocks per host: 2 Port block active timeout: 0 Last active block recycle timeout: 0 Used/total port blocks: 1/6451 Host_IP External_IP Port_Block Ports_Used/ Block_State/ Range Ports_Total Left_Time(s) 10.10.10.3 192.0.2.19 24994-25003 6/10*1 Active/-
show services nat source port-block (MX-SPC3)
user@host> show services nat source port-block Pool name: NAT_POOL1--WEB-MX-SPC3NAT_WEB_MX_SPC3NAT_web-mx--spc3_NAT-POOL Port-overloading-factor: 1 Port block size: 2 Max port blocks per host: 1 Port block active timeout: 0 Used/total port blocks: 0/64
show services nat source port-block (MX240, MX480, and MX960)
user@host> show services nat source port-block Interface: vms-3/0/0 Pool name: Pool2 Port-overloading-factor: 1 Port block size: 5 Max port blocks per host: 8 Port block active timeout: 0 Used/total port blocks: 2/8 Host_IP External_IP Port_Block Ports_Used/ Block_State/ Range Ports_Total Left_Time(s) 10.10.10.2 192.0.2.18 2005-2009 5/5*1 Inactive/- 10.10.10.2 192.0.2.18 2020-2024 5/5*1 Active/-
Release Information
Command introduced in Junos OS Release 12.1X47-D10. The Last
active block recycle timeout
output field added in
Junos OS Release 15.1X49-D60.