IOS NAT Hit and order

[Delmiro Campelo]

Hello support community,

I have been reading several Cisco documents and haven't been able to find answers to these questions regarding NAT in the IOS devices (not the ASAs)

1. Is it possible to view the hit count for a specific NAT statement ? just like you can in the ASA with show nat command?

2. Are the NAT statements processed from top to bottom as listed on device configuration?

I'm not looking for that NAT order of operations, I don't believe it answers questions #2.

Thanks for any help you can provide

Delmiro

[Julio E. Moisa · Accepted solution]

Hi Delmiro,

You could see the current translations on Routers using:

show ip nat translations

I think the NAT statements are read by match like an ACL. Please check this link:

http://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/6209-5.html

Hope it is useful

:-)

[Georg Pauwen · Accepted solution]

Hello,

to my best knowledge, the only command that show hits and misses is 'show ip nat statistics', but it is not specified by NAT statement. You might be able to pull additional info from the command line with 'snmp get', using the Cisco NAT MIB (linked below).

Second question: the device configuration, that is, how the running config lists the NAT statements, is not relevant. The NAT order of operation is still leading.

CISCO-IETF-NAT-MIB

http://www.oidview.com/mibs/9/CISCO-IETF-NAT-MIB.html