Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

IP NAT Debug: Wanted != Got

I have a static NAT configuration that works perfectly, save for one entry. Whenever I try to use the static nat entry for udp port 61234, the "wanted port" of 61234 is never equal to the "got" port. I assume this means the translation failed.

Can anyone help me understand what's going on, and how to correct it? I can't use any applications on this port, even after a reload of the router (or after executing a clear ip nat trans * or clear ip nat trans force).



interface FastEthernet0/0

ip address

ip nat inside

no ip route-cache cef

no ip route-cache

no ip mroute-cache

load-interval 30

speed 100


hold-queue 600 in


interface Ethernet1/0

ip address dhcp client-id Ethernet1/0

ip nat outside

no ip route-cache cef

no ip route-cache

no ip mroute-cache

load-interval 30


hold-queue 600 in


ip nat inside source list 1 interface Ethernet1/0 overload

ip nat inside source static udp 61234 interface Ethernet1/0 61234


access-list 1 permit

Router#sh ip nat trans

Pro Inside global Inside local Outside local Outside global

udp --- ---

When I debug ip nat detailed, I receive the following output:

.Feb 15 02:28:42.895: NAT: s=>, d= [28545]

.Feb 15 02:28:43.067: NAT: [0] Allocated Port for -> wanted 61234 got 1041

.Feb 15 02:28:43.067: NAT: o: udp (, 38717) -> (, 61234) [44622]

.Feb 15 02:28:43.071: NAT: s=, d=> [44622]

.Feb 15 02:28:43.071: NAT: i: udp (, 61234) -> (, 38717) [28547]

.Feb 15 02:28:43.071: NAT: UDP s=61234->1041, d=38717

.Feb 15 02:28:43.071: NAT: s=>, d= [28547]

.Feb 15 02:28:43.223: NAT: o: icmp (, 38717) -> (, 1041) [56801]

.Feb 15 02:28:43.227: NAT: s=, d=> [56801]

Router#sh ver

Cisco Internetwork Operating System Software

IOS (tm) C2600 Software (C2600-IK9O3S3-M), Version 12.3(20), RELEASE SOFTWARE (fc2)

Technical Support:

Copyright (c) 1986-2006 by cisco Systems, Inc.

Compiled Tue 08-Aug-06 20:50 by kesnyder

Image text-base: 0x80008098, data-base: 0x81A0E7A8

CreatePlease to create content