Filter
Top Products
address 10.5.3.20 and sent to the Internal NAT Network by the router.
Line 1 shows a different option for the one−to−one address translation pairs. It lists IP
address:port combinations such that a site on the Internet could access a Web server on the
workstation at the NAT Network address of 10.5.3.11.
SHOW NAT MAP
This display was described at the end of the previous section, but several other details will be
presented here.
Nat_2220> show nat map
[ NAT Map Database ]
Total Number of Entries in NAT Map Database: 2
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
Internal External
LineNo. <IPaddress[/Mask or :Port]> −> <IPaddress[/Mask or :Port]>
1 −>
2 −>
As noted previously, individual sockets (IP Address and Port combinations) can be entered
and displayed as one−to−one pairs.
For example:
1 −>
is entered to allow a workstation at the Internal NAT Network address of 10.5.3.11 to be seen
as a Web server on the Internet (the External Network) at the IP address of 198.41.9.194.
The one−to−one pairs can also map ranges of IP addresses such as:
X −>
One important relationship between the NAT Map Database and the entered Internal and
External Range(s) of NAT must be introduced here:
The Internal half of the one−to−one pair must be within the NAT Internal
Range of the configuration, and the External half of the one−to−one pair
must be within the NAT External Range of the configuration.
The NAT software will not use a one−to−one pair in the NAT Map Database which fails to
meet the above criteria.
SHOW NAT SESSIONS
This command will display all active NAT Sessions that the NAT software is presently using
to modify IP packets as they travel between the NAT Network and the External
Network/Internet.
Nat_2220> show nat sessions
Active Map Remote Proto Hashes
−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−− −−−−−−−−−−−−−−−−−−−− −−−−−− −−−−−−−−−
Time Since: Created Last Activity
−−−−−−−−−−−−−−−−− −−−−−−−−−−−−−−−−
10.5.3.20:0 −>198.41.9.194:0 198.41.9.200:0 ICMP 221/907
124.33 114.33