Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

10-7

Cisco ASA Series 명령 참조, S 명령

10장 show nac-policy through show ospf virtual-links 명령

show nat

예

다음은 show nat 명령의 샘플 출력입니다.

ciscoasa# show nat

Manual NAT Policies (Section 1)

1 (any) to (any) source dynamic S S' destination static D' D

translate_hits = 0, untranslate_hits = 0

Auto NAT Policies (Section 2)

1 (inside) to (outside) source dynamic A 2.2.2.2

translate_hits = 0, untranslate_hits = 0

Manual NAT Policies (Section 3)

1 (any) to (any) source dynamic C C' destination static B' B service R R'

translate_hits = 0, untranslate_hits = 0

ciscoasa# show nat detail

Manual NAT Policies (Section 1)

1 (any) to (any) source dynamic S S' destination static D' D

translate_hits = 0, untranslate_hits = 0

Source - Real: 1.1.1.2/32, Mapped: 2.2.2.3/32

Destination - Real: 10.10.10.0/24, Mapped: 20.20.20.0/24

Auto NAT Policies (Section 2)

1 (inside) to (outside) source dynamic A 2.2.2.2

translate_hits = 0, untranslate_hits = 0

Source - Real: 1.1.1.1/32, Mapped: 2.2.2.2/32

Manual NAT Policies (Section 3)

1 (any) to (any) source dynamic C C' destination static B' B service R R'

translate_hits = 0, untranslate_hits = 0

Source - Real: 11.11.11.10-11.11.11.11, Mapped: 192.168.10.10/32

Destination - Real: 192.168.1.0/24, Mapped: 10.75.1.0/24

Service - Real: tcp source eq 10 destination eq ftp-data , Mapped: tcp source eq

100 destination eq 200

다음은 IPv6과 IPv4 간 show nat detail 명령의 샘플 출력입니다.

ciscoasa# show nat detail

1 (in) to (outside) source dynamic inside_nw outside_map destination static inside_map any

translate_hits = 0, untranslate_hits = 0

Source - Origin: 2001::/96, Translated: 192.168.102.200-192.168.102.210

Destination - Origin: 2001::/96, Translated: 0.0.0.0/0

다음은 show nat divert ipv6 명령의 샘플 출력입니다.

ciscoasa# show nat divert ipv6

Divert Table

id=0xcb9ea518, domain=divert-route

type=static, hits=0, flags=0x21, protocol=0

src ip/id=2001::/ffff:ffff:ffff:ffff:ffff:ffff::, port=0-0

dst ip/id=2001::/ffff:ffff:ffff:ffff:ffff:ffff::, port=0-0

input_ifc=in, output_ifc=outside

id=0xcf24d4b8, domain=divert-route

type=static, hits=0, flags=0x20, protocol=0

src ip/id=::/::, port=0-0

dst ip/id=2222::/ffff:ffff:ffff:ffff:ffff:ffff::, port=0-0

input_ifc=in, output_ifc=mgmt