Operational visibility: Which IOS command shows all currently active NAT translations on the router (a snapshot of the present table)?

Difficulty: Easy

Correct Answer: show ip nat translations

Explanation:

Introduction / Context:When validating NAT behavior, you often need to confirm which flows are translated and to what addresses. A command that lists the active entries is indispensable.

Given Data / Assumptions:

  • NAT is configured (static, dynamic, or PAT).
  • Traffic has flowed so that translations exist.
  • You want a point-in-time view, not a live debug feed.

Concept / Approach:'show ip nat translations' displays the current translation table with columns for inside local/global and outside local/global. 'show ip nat statistics' summarizes counters and pool usage. 'debug ip nat' streams real-time events. 'clear ip nat translations *' deletes entries.

Step-by-Step Solution:

Run 'show ip nat translations' in privileged EXEC.Interpret columns to verify expected mappings.Use filters (e.g., pipe to include) if the table is large.

Verification / Alternative check:Generate test traffic (ping/HTTP) and rerun the command; new entries should appear. Compare with 'show ip nat statistics' for aggregate counts.

Why Other Options Are Wrong:show ip nat statistics: Summary only. debug ip nat: Real-time, not a static list. clear ip nat translations *: Destructive maintenance, not a display.

Common Pitfalls:Assuming empty tables mean misconfiguration; idle timers may have aged entries out. Re-test with fresh traffic.

Final Answer:show ip nat translations

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion