NAT probe commands -- display system internal nat

Use display system internal nat to display the NAT configuration in the kernel.

Syntax

Centralized devices:

display system internal nat

Distributed devices in standalone mode:Centralized IRF devices:

display system internal nat slot slot-number [ cpu cpu-number ]

Distributed devices in IRF mode:

display system internal nat chassis chassis-number slot slot-number [ cpu cpu-number ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

NAT probe commands -- display system internal nat controller

| NOTE: Support for this command depends on the device model.

Use display system internal nat controller to display information about engines that process NAT flows.

Syntax

display system internal nat controller

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If NAT uses failover groups, this command displays all failover groups that NAT uses and their member engines.

If NAT does not use any failover group, this command displays all engines that process NAT flows.

NAT probe commands -- display system internal nat flow

| NOTE: Support for this command depends on the device model.

Use display system internal nat flow to display NAT flow redirection rules.

Syntax

display system internal nat flow { all | dynamic | portblock | server | static }

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

all: Displays all NAT flow redirection rules.

dynamic: Displays redirection rules for dynamic NAT flows.

server: Displays redirection rules for NAT Server flows.

static: Displays redirection rules for static NAT flows.

portblock: Displays redirection rules for NAT444 flows.

Usage guidelines

When multiple engines exist, NAT applies flow redirection rules to the interface card to ensure that all packets of the same session are processed by the same engine.

NAT probe commands -- display system internal nat statistics

Use display system internal nat statistics to display NAT statistics.

Syntax

Centralized devices:

display system internal nat statistics

Distributed devices in standalone mode:Centralized IRF devices:

display system internal nat statistics [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display system internal nat statistics [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command displays NAT statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, the command displays NAT statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays NAT statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command displays NAT statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot number of the card. If you do not specify a card, this command displays NAT statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays NAT statistics for all cards if you do not specify a card. On an IRF 3 system, this command displays NAT statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Usage guidelines

When packet loss occurs in your network where NAT service is configured, you can use this command to check if the packet loss is caused by NAT service.

NAT probe commands -- reset system internal nat statistics

Use reset system internal nat statistics to clear NAT statistics.

Syntax

Centralized devices:

reset system internal nat statistics

Distributed devices in standalone mode:Centralized IRF devices:

reset system internal nat statistics [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset system internal nat statistics [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, the command clears NAT statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, the command clears NAT statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears NAT statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command clears NAT statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument specifies the member ID of the IRF member device. The slot-number argument specifies the slot number of the card. If you do not specify a card, this command clears NAT statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears NAT statistics for all cards if you do not specify a card. On an IRF 3 system, this command clears NAT statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.