Which Cisco IOS command provides a concise summary of the router's NAT configuration and counters (pool usage, translations, hits, misses)?
-
Ashow ip nat translations
-
Bshow ip nat statistics
-
Cdebug ip nat
-
Dclear ip nat translations *
Answer
Correct Answer: show ip nat statistics
Explanation
Introduction / Context:Beyond listing active translations, administrators often need aggregate information: total translations, misses, expired entries, pool allocations, and interface roles. A single command provides this summary view.
Given Data / Assumptions:
- NAT is running on the router.
- You need an overview, not per-entry details or live debug.
Concept / Approach:'show ip nat statistics' summarizes NAT health: total translations, peak counts, hits/misses, pool addresses in use/available, and which interfaces are configured as 'ip nat inside' or 'ip nat outside'. In contrast, 'show ip nat translations' lists per-flow entries only.
Step-by-Step Solution:
Run 'show ip nat statistics' in privileged EXEC.Review counters (total translations, misses) and interface roles.Check pool utilization to spot exhaustion problems.Verification / Alternative check:Correlate with 'show ip nat translations' to inspect specific flows if anomalies appear in statistics.
Why Other Options Are Wrong:show ip nat translations: Per-entry detail, not a summary. debug ip nat: Real-time events only. clear ip nat translations *: Flushes entries; it does not display status.
Common Pitfalls:Misreading peak vs. current counters; ensure you know whether values are cumulative or current.
Final Answer:show ip nat statistics