Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAT translation

Is there a way to show the actual NAT translation given either the public or private address? If so is there a way to manually disconnect/block that IP without an ACL? Thanks for any help...

1 REPLY
Cisco Employee

Re: NAT translation

> sho xlate [global | local ip]

will show you the translation for a specific local or global IP address. You can then clear this particular translation with:

> clear xlate [global | local ip]

See the following URL for details.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/s.htm#1063516

You can't really block it without an ACL, but you could stop it being NAT'd (effectively stopping anything outbound from it) by removing that IP address from your NAT statement, could get messy depending on how your subnetting is set up though.

183
Views
0
Helpful
1
Replies
CreatePlease to create content