Cisco ASA Series Cli Configuration Manual page 836

Monitoring Twice NAT
Command
Configuring Per-Session PAT Rules
By default, all TCP PAT traffic and all UDP DNS traffic uses per-session PAT. To use multi-session PAT
for traffic, you can configure per-session PAT rules: a permit rule uses per-session PAT, and a deny rule
uses multi-session PAT. For more information about per-session vs. multi-session PAT, see the
"Per-Session PAT vs. Multi-Session PAT" section on page
Detailed Steps
To configure a per-session PAT rule, see the
Monitoring Twice NAT
To monitor twice NAT, enter one of the following commands:
Command
show nat
show nat pool
show xlate
Configuration Examples for Twice NAT
This section includes the following configuration examples:
•
Cisco ASA Series CLI Configuration Guide
1-24
Purpose
Shows NAT statistics, including hits for each NAT rule.
Shows NAT pool statistics, including the addresses and ports allocated,
and how many times they were allocated.
Shows current NAT session information.
Different Translation Depending on the Destination (Dynamic PAT), page 1-25
Purpose
(Continued)
•
No Proxy ARP—(Optional) Specify no-proxy-arp to disable
proxy ARP for incoming packets to the mapped IP addresses.
See the "Mapped Addresses and Routing" section on
page 1-19 for more information.
•
Route lookup—(Optional; routed mode only; interface(s)
specified) Specify route-lookup to determine the egress
interface using a route lookup instead of using the interface
specified in the NAT command. See the
Egress Interface" section on page 1-22
•
Inactive—(Optional) To make this rule inactive without
having to remove the command, use the inactive keyword. To
reactivate it, reenter the whole command without the inactive
keyword.
•
Description—(Optional) Provide a description up to 200
characters using the description keyword.
1-9.
"Configuring Per-Session PAT Rules" section on page
Chapter 1 Configuring Twice NAT
"Determining the
for more information.
1-16.