59
4. nat info
Syntax:
nat info
Description:
This command displays the values of various parameters, which are defined in the module file, for
example the session table size and the session timeouts. NAT’s current memory usage is also
displayed.
Example:
>
nat info
Interface table size 1 (116 bytes)
Session table size per interface: 128 (6656 bytes)
Total: 6656 bytes
Hash table size per interface: 128 (512 bytes)
Total: 512 bytes
Fragment table size per interface: 32 (640 bytes)
Total: 640 bytes
Max queued buffers: 16
Fragment timeout: 30
Support for incoming fragments: enabled
Support for outgoing fragments: enabled
Session timeouts:
ICMP query: 10
UDP: 30
TCP (established): 300
TCP (other): 15
Initial port number: 10000
5. nat protocol
Syntax:
nat protocols
Description:
The
nat protocols
command lists the application level gateways (ALGs) provided in the current
image in order to support particular higher-level protocols, and the port or ports, which each ALG
monitors
Example
>
nat protocols
Name Port/IP protocol
ftp 21/tcp
6. nat sessions
Syntax:
nat sessions <i/f> [all | summary]
Description:
The
nat sessions
command displays a list of currently active NAT sessions on the interface
<i/f
>
. In this context, a session is a pair of source IP addresses and port numbers (and
corresponding new port number) that NAT regards as one side of an active connection. For each
TCP or UDP session active, the source and destination IP address and port number, and the local
port number and the age of the session, are printed.
The
all
option causes the
sessions
command to print out information on every session,
including sessions, which have timed out. Normally the
sessions
command only shows active
sessions (those which have not timed out). The
summary
command does not show detailed
information on each session, but only prints out the total number of active, timed out and available
sessions.
Example:
>
nat sessions ppp
Proto Age NAT port Private address/port Public address/port
TCP 34 1024 192.168.219.38/3562 194.129.50.6/21
TCP 10 1025 192.168.219.64/2135 185.45.30.30/80
Total:
2 sessions active
101 sessions timed out
126 sessions available