Difficulty: Easy
Correct Answer: show ip nat translations
Explanation:
Introduction / Context:
When validating NAT behavior, you often need to confirm which flows are translated and to what addresses. A command that lists the active entries is indispensable.
Given Data / Assumptions:
Concept / Approach:
'show ip nat translations' displays the current translation table with columns for inside local/global and outside local/global. 'show ip nat statistics' summarizes counters and pool usage. 'debug ip nat' streams real-time events. 'clear ip nat translations *' deletes entries.
Step-by-Step Solution:
Verification / Alternative check:
Generate test traffic (ping/HTTP) and rerun the command; new entries should appear. Compare with 'show ip nat statistics' for aggregate counts.
Why Other Options Are Wrong:
show ip nat statistics: Summary only. debug ip nat: Real-time, not a static list. clear ip nat translations *: Destructive maintenance, not a display.
Common Pitfalls:
Assuming empty tables mean misconfiguration; idle timers may have aged entries out. Re-test with fresh traffic.
Final Answer:
show ip nat translations
Discussion & Comments