Debuging NAT on ASA

Unanswered Question
Jun 3rd, 2008
User Badges:


I don't know this is possible (I can't find it how) but I would like to debug all translations the ASA performs. I would like to view in realtime all translations.

Show xlate is a way to view translations I guess, but it is not what I was looking for.

Is there any way I can get this done?

Thank you,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Mon, 06/09/2008 - 08:11
User Badges:
  • Purple, 4500 points or more


What Shumon suggested will only work on routers. With the new ASA's I have not been able to find a command to debug NAT.

Amadou TOURE Mon, 06/09/2008 - 08:44
User Badges:

show local-host, show connection could help even they're not exclusively related to NAT.

You could also use the command :

"logging list event_list message start" with the Message 202001 (out of translation slots) and messages 305009 through

305011 (translations built and torn down)


Farrukh Haroon Mon, 06/09/2008 - 12:20
User Badges:
  • Red, 2250 points or more

I'm also unaware of any command that can help you debug NAT. You can use the following tough:

show xlate [det | debug]

show conn det [all]

show local-host [all]

show nat




This Discussion