Which Cisco IOS command provides a concise summary of the router's NAT configuration and counters (pool usage, translations, hits, misses)?

Difficulty: Easy

Correct Answer: show ip nat statistics

Explanation:


Introduction / Context:
Beyond listing active translations, administrators often need aggregate information: total translations, misses, expired entries, pool allocations, and interface roles. A single command provides this summary view.



Given Data / Assumptions:

  • NAT is running on the router.
  • You need an overview, not per-entry details or live debug.


Concept / Approach:
'show ip nat statistics' summarizes NAT health: total translations, peak counts, hits/misses, pool addresses in use/available, and which interfaces are configured as 'ip nat inside' or 'ip nat outside'. In contrast, 'show ip nat translations' lists per-flow entries only.



Step-by-Step Solution:

Run 'show ip nat statistics' in privileged EXEC.Review counters (total translations, misses) and interface roles.Check pool utilization to spot exhaustion problems.


Verification / Alternative check:
Correlate with 'show ip nat translations' to inspect specific flows if anomalies appear in statistics.



Why Other Options Are Wrong:
show ip nat translations: Per-entry detail, not a summary. debug ip nat: Real-time events only. clear ip nat translations *: Flushes entries; it does not display status.



Common Pitfalls:
Misreading peak vs. current counters; ensure you know whether values are cumulative or current.



Final Answer:
show ip nat statistics

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion