SRX

Hello,

Can anyone please let me know how to view the NAT table ?

I have got the two options 

>Show security flow session (where i can see only translated IPs)

>Show security nat incoming-table ( when i issue this command output displays like 0 IPs are in use even though NAT is enabled and traffic is intiated where i could see in session table by using above command)

Please help me out in order to view original IPs and Translated IPs

Thank you in advance,

Hari.

You can do

show security flow session nat

And that will show you what current translations you have. You can also do

show security nat <static|source|destination> rule <rule name|all>

And that will show you the translation hits, etc. that you have for each of your rules. It also shows you what addresses are getting translated (from what pools you have configured, etc.).

You can also append "extensive" and "detail" to some of those commands too, to get more output.

Hope this helps!

Hi Sir,

Thank you for replying.

I am ok with the above mentioned commands. 

But i am unable to get the output for 

" show security nat incoming-table " command .

Thanks,

Hari.

---

@Hari Reddy wrote:

Hi Sir,

 

Thank you for replying.

 

I am ok with the above mentioned commands. 

But i am unable to get the output for 

 

" show security nat incoming-table " command .

 

Thanks,

Hari.

 

---

The command 'show security nat incoming-table' in flow mode does not generate any output or always shows '0' as the output. Pls Read KB22205

Hi 

The following commands are helpful for verifying and troubleshooting NAT:

show security nat source summary

show security nat source rule 

show security nat source pool

show security nat destination summary

show security nat destination pool

show security nat destination rule

show security nat static rule

show security flow session

Reference:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB15758