Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Cisco ASA Series 명령 참조, S 명령      

10장      show nac-policy through show ospf virtual-links 명령

TCP inside, address 10.76.11.25, range 1024-65535, allocated 1

다음은 PAT 풀 flat 옵션 사용을 보여 주는 show nat pool 명령의 샘플 출력입니다. include-reserve 
키워드가 없으면 두 개의 범위가 표시됩니다. 둘 중 낮은 범위는 1024 미만의 소스 포트가 동일한 
포트에 매핑된 경우에 사용됩니다.

ciscoasa# show nat pool

ICMP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 2

TCP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-1024, allocated 0

TCP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1024-65535, allocated 2

UDP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-1024, allocated 0

UDP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1024-65535, allocated 2

다음은 PAT 풀 flat include-reserve 옵션 사용을 보여 주는 show nat pool 명령의 샘플 출력입니다. 

ciscoasa# show nat pool

ICMP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 2

TCP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 2

UDP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 2

다음은 PAT 풀 extended flat include-reserve 옵션 사용을 보여 주는 show nat pool 명령의 샘플 출
력입니다. 중요한 항목은 괄호 안의 주소입니다. 이는 PAT를 확장하는 데 사용되는 목적지 주소입
니다.

ICMP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 0

ICMP PAT pool outside:dynamic-pat, address 172.16.2.200(172.16.2.99), range 1-65535, 

allocated 2

TCP PAT pool outside:dynamic-pat, address 172.16.2.200(172.16.2.100), range 1-65535, 

allocated 1

UDP PAT pool outside:dynamic-pat, address 172.16.2.200(172.16.2.100), range 1-65535, 

allocated 1

TCP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 0

ICMP PAT pool outside:dynamic-pat, address 172.16.2.200(172.16.2.100), range 1-65535, 

allocated 1

TCP PAT pool outside:dynamic-pat, address 172.16.2.200(172.16.2.99), range 1-65535, 

allocated 2

UDP PAT pool outside:dynamic-pat, address 172.16.2.200, range 1-65535, allocated 0

관련 명령

명령

설명

하나의 인터페이스에서 다른 인터페이스의 매핑된 주소로 변환된 주소
를 식별합니다.

NAT 정책 통계를 표시합니다.