Debuging NAT on ASA

Unanswered Question
Jun 3rd, 2008

Hi,


I don't know this is possible (I can't find it how) but I would like to debug all translations the ASA performs. I would like to view in realtime all translations.

Show xlate is a way to view translations I guess, but it is not what I was looking for.


Is there any way I can get this done?


Thank you,

Jan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Collin Clark Mon, 06/09/2008 - 08:11

Jan-


What Shumon suggested will only work on routers. With the new ASA's I have not been able to find a command to debug NAT.


Amadou TOURE Mon, 06/09/2008 - 08:44

show local-host, show connection could help even they're not exclusively related to NAT.


You could also use the command :

"logging list event_list message start" with the Message 202001 (out of translation slots) and messages 305009 through

305011 (translations built and torn down)


Regards

Farrukh Haroon Mon, 06/09/2008 - 12:20

I'm also unaware of any command that can help you debug NAT. You can use the following tough:


show xlate [det | debug]

show conn det [all]

show local-host [all]

show nat


Regards


Farrukh

Actions

This Discussion