User Tools

Site Tools


tech:network:cisco:nat-timeout:nat-timeout

NAT Timeout

Physical Lab 6

Using Cisco IOS 15.1(4)M10, Cisco ISR1841 box.

Common Configuration

en
conf t
!
! ip configuration
int f0/1
ip addr 192.168.10.210 255.255.255.0
no shut
exit
int f0/0
ip addr 172.16.2.1 255.255.255.0
no shut
exit
!
! default route
ip route 0.0.0.0 0.0.0.0 192.168.10.1
!
end

Dynamic NAT

conf t
!
ip nat pool PG1X-NAT-POOL 192.168.10.211 192.168.10.212 netmask 255.255.255.248
!
access-list 1 permit 172.16.2.11
access-list 1 permit 172.16.2.12
access-list 1 permit 172.16.2.13
!
ip nat inside source list 1 pool PG1X-NAT-POOL
!
int f0/1
ip nat outside
exit
!
int f0/0
ip nat inside
exit
!
end
pi@pi1:~ $ nc 160.16.63.136 80
GET /
pi@pi2:~ $ nc 160.16.63.136 80
GET /
pi@pi3:~ $ nc 160.16.63.136 80
GET /

Clear NAT translation entry

R1#sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 23:10:40, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 23:10:36, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 23:10:41, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 23:10:38, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
--- 192.168.10.212     172.16.2.12        ---                ---
R1#clear ip nat t *
R1#sh ip nat t
R1#
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:50325 172.16.2.11:50325 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.212     172.16.2.11        ---                ---
tcp 192.168.10.211:38002 172.16.2.12:38002 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.12        ---                ---
R1#sh ip nat translations  ver
R1#sh ip nat translations  verbose
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:50325 172.16.2.11:50325 160.16.63.136:80  160.16.63.136:80
    create 00:00:24, use 00:00:22 timeout:86400000, left 00:00:37, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
--- 192.168.10.212     172.16.2.11        ---                ---
    create 00:00:24, use 00:00:24 timeout:86400000, left 23:59:35, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 21, lc_entries: 0
tcp 192.168.10.211:38002 172.16.2.12:38002 160.16.63.136:80  160.16.63.136:80
    create 00:00:26, use 00:00:19 timeout:86400000, left 00:00:40, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
--- 192.168.10.211     172.16.2.12        ---                ---
    create 00:00:26, use 00:00:26 timeout:86400000, left 23:59:33, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 19, lc_entries: 0
R1#sh ip nat statistics
Total active translations: 4 (0 static, 4 dynamic; 2 extended)
Peak translations: 6, occurred 00:03:08 ago
Outside interfaces:
  FastEthernet0/1
Inside interfaces:
  FastEthernet0/0
Hits: 78  Misses: 0
CEF Translated packets: 78, CEF Punted packets: 7
Expired translations: 2
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 1 pool PG1X-NAT-POOL refcount 4
 pool PG1X-NAT-POOL: netmask 255.255.255.248
        start 192.168.10.211 end 192.168.10.212
        type generic, total addresses 2, allocated 2 (100%), misses 7

Total doors: 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0
R1#clear ip nat trans
R1#clear ip nat translation
% Incomplete command.

R1#clear ip nat translation *
R1#sh ip nat translations
R1#sh ip nat translations verbose
R1#sh ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Peak translations: 6, occurred 00:03:41 ago
Outside interfaces:
  FastEthernet0/1
Inside interfaces:
  FastEthernet0/0
Hits: 78  Misses: 0
CEF Translated packets: 78, CEF Punted packets: 7
Expired translations: 2
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 1 pool PG1X-NAT-POOL refcount 0
 pool PG1X-NAT-POOL: netmask 255.255.255.248
        start 192.168.10.211 end 192.168.10.212
        type generic, total addresses 2, allocated 0 (0%), misses 7

Total doors: 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0
clear ip nat translation inside 192.168.10.211 172.16.2.12
clear ip nat translation tcp inside 192.168.10.211 51504 172.16.2.13 51504 outside 160.16.63.136 80  160.16.63.136 80
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:50326 172.16.2.11:50326 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.212     172.16.2.11        ---                ---
tcp 192.168.10.211:38003 172.16.2.12:38003 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.12        ---                ---
R1#sh ip nat translations verbose
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:50326 172.16.2.11:50326 160.16.63.136:80  160.16.63.136:80
    create 00:00:24, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
--- 192.168.10.212     172.16.2.11        ---                ---
    create 00:00:24, use 00:00:24 timeout:86400000, left 23:59:35, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 25, lc_entries: 0
tcp 192.168.10.211:38003 172.16.2.12:38003 160.16.63.136:80  160.16.63.136:80
    create 00:00:28, use 00:00:16 timeout:86400000, left 00:00:43, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
--- 192.168.10.211     172.16.2.12        ---                ---
    create 00:00:28, use 00:00:28 timeout:86400000, left 23:59:31, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 23, lc_entries: 0
R1#clear ip nat transl
R1#clear ip nat translation insi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.11
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.12        ---                ---
R1#clar ip nat translation inside 192.168.10.211
     ^
% Invalid input detected at '^' marker.

R1#clar ip nat translation inside 192.168.10.211 172.16.2.12
     ^
% Invalid input detected at '^' marker.

R1#clear ip nat translation inside 192.168.10.211 172.16.2.12
R1#sh ip nat translations
R1#! generate communicastion
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:38004 172.16.2.12:38004 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.212     172.16.2.12        ---                ---
tcp 192.168.10.211:51500 172.16.2.13:51500 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.212:38004 172.16.2.12:38004 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.212     172.16.2.12        ---                ---
tcp 192.168.10.211:51500 172.16.2.13:51500 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1#clear ip nat translations
R1#clear ip nat translation?
translation

R1#clear ip nat translation insi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.12 outsi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.12 outside ?
  A.B.C.D  Local IP address

R1#$ion inside 192.168.10.212 172.16.2.12 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
--- 192.168.10.211     172.16.2.13        ---                ---
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
tcp 192.168.10.211:51501 172.16.2.13:51501 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1#$ion inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
tcp 192.168.10.211:51501 172.16.2.13:51501 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1#$0.211:51501 172.16.2.13:51501 outside 160.16.63.136:80  160.16.63.136:80
clear ip nat translation inside 192.168.10.211:51501 172.16.2.13:51501 outside 1                                              ^60.16.63.136:80  160.16.63.136:80

% Invalid input detected at '^' marker.

R1#sh ip nat transla
R1#sh ip nat translations ?
  esp      Show ESP entries
  global   Display entries in Global/Dest Table - NVI
  icmp     Show ICMP entries
  pptp     Show PPTP entries
  tcp      Show TCP entries
  udp      Show UDP entries
  verbose  Show extra information
  vrf      Display entries of VRF instance
  |        Output modifiers
  <cr>

R1#clear ip nat trans
R1#clear ip nat translation insi
R1#clear ip nat translation inside ?
  A.B.C.D  Global IP address

R1#clear ip nat translation inside 192.168.10.211 172.16.2.13 ?
  forced   Delete all dynamic translations (forcefully)
  outside  Outside addresses (and ports)
  <cr>

R1#clear ip nat translation inside 192.168.10.211 172.16.2.13 outsi
R1#$t translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136?
A.B.C.D

R1#$t translation inside 192.168.10.211 172.16.2.13 outside ?
  A.B.C.D  Local IP address

R1#$t translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 ?
  A.B.C.D  Global IP address

R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136 ?
  <cr>

R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat trans | i :
R1#sh ip nat trans | i :
tcp 192.168.10.211:51502 172.16.2.13:51502 160.16.63.136:80  160.16.63.136:80
R1#$0.211:51502 172.16.2.13:51502 outside 160.16.63.136:80 160.16.63.136:80
clear ip nat translation inside 192.168.10.211:51502 172.16.2.13:51502 outside 1                                              ^60.16.63.136:80 160.16.63.136:80

% Invalid input detected at '^' marker.

R1#sh ip nat trans | i :
tcp 192.168.10.211:51502 172.16.2.13:51502 160.16.63.136:80  160.16.63.136:80
R1#
R1#$ion inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136:80 160.16.63.136:80
clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136
:80 160.16.63.136:80
^
% Invalid input detected at '^' marker.

R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 80 160.16.63.136 80
clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136
 80 160.16.63.136 80
   ^
% Invalid input detected at '^' marker.

R1#sh ip nat trans | i :
R1#sh ip nat trans | i :
tcp 192.168.10.211:51503 172.16.2.13:51503 160.16.63.136:80  160.16.63.136:80
R1#$0.211 51503 172.16.2.13 51503 outside 160.16.63.136 80  160.16.63.136 80
clear ip nat translation inside 192.168.10.211 51503 172.16.2.13 51503 outside 1                                                 ^60.16.63.136 80  160.16.63.136 80

% Invalid input detected at '^' marker.

R1#$0.211 51503 172.16.2.13 51503 outside 160.16.63.136 80  160.16.63.136 80
clear ip nat translation inside 192.168.10.211 51503 172.16.2.13 51503 outside 1                                                 ^60.16.63.136 80  160.16.63.136 80

% Invalid input detected at '^' marker.

R1#sh ip nat trans | i :
tcp 192.168.10.211:51503 172.16.2.13:51503 160.16.63.136:80  160.16.63.136:80
R1#cle
R1#clear ip nat
R1#clear ip nat trasn
R1#clear ip nat trans
R1#clear ip nat translation ?
  *                   Delete all dynamic translations
  esp                 Encapsulating Security Payload
  forced              Delete all dynamic translations (forcefully)
  inside              Inside addresses (and ports)
  outside             Outside addresses (and ports)
  piggyback-internal  Delete all dynamic translations created off of
                      piggyback-data
  tcp                 Transmission Control Protocol
  udp                 User Datagram Protocol
  vrf                 Clear entries of VRF instance

R1#clear ip nat translation tc
R1#clear ip nat translation tcp ins
R1#$51503 172.16.2.13 51503 outside 160.16.63.136 80  160.16.63.136 80
%Translation not found
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
--- 192.168.10.211     172.16.2.13        ---                ---
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
tcp 192.168.10.211:51504 172.16.2.13:51504 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1#$51504 172.16.2.13 51504 outside 160.16.63.136 80  160.16.63.136 80
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
--- 192.168.10.211     172.16.2.13        ---                ---

IP Addressing: NAT Configuration Guide, Cisco IOS Release 12.4T - Monitoring and Maintaining NAT [Support] - Cisco

! NG
clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 80 160.16.63.136 80
! OK
clear ip nat translation tcp inside 192.168.10.211 51504 172.16.2.13 51504 outside 160.16.63.136 80  160.16.63.136 80

NAT etnry timeout value change

R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
--- 192.168.10.211     172.16.2.13        ---                ---
R1#sh ip nat verbose
             ^
% Invalid input detected at '^' marker.

R1#sh ip nat translations verbose
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
    create 00:23:56, use 00:23:56 timeout:86400000, left 23:36:03, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 29, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:23:56, use 00:10:43 timeout:86400000, left 23:49:16, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 27, lc_entries: 0
R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#ip nat translation
R1(config)#ip nat translation ti
R1(config)#ip nat translation timeout 60
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
--- 192.168.10.211     172.16.2.13        ---                ---
R1(config)#sh ip nat t ve
               ^
% Invalid input detected at '^' marker.

R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.212     172.16.2.12        ---                ---
    create 00:26:36, use 00:26:36 timeout:86400000, left 23:33:23, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 29, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:26:36, use 00:13:23 timeout:86400000, left 23:46:36, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 27, lc_entries: 0
R1(config)#do ip clear ip nat t *
ip clear ip nat t *
   ^
% Invalid input detected at '^' marker.

R1(config)#do ip clear ip nat tr *
ip clear ip nat tr *
   ^
% Invalid input detected at '^' marker.

R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat t
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:00:11, use 00:00:11 timeout:86400000, left 23:59:48, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:00:11, use 00:00:11 timeout:60000, left 00:00:48, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:00:58, use 00:00:58 timeout:86400000, left 23:59:01, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:00:58, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.13        ---                ---
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:08, use 00:00:08 timeout:86400000, left 00:00:51, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:08, use 00:01:08 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:12, use 00:00:12 timeout:86400000, left 00:00:47, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:12, use 00:01:12 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:17, use 00:00:16 timeout:86400000, left 00:00:43, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:17, use 00:01:17 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:30, use 00:00:30 timeout:86400000, left 00:00:29, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:30, use 00:01:30 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:49, use 00:00:49 timeout:86400000, left 00:00:10, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:49, use 00:01:49 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:53, use 00:00:53 timeout:86400000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:53, use 00:01:53 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80  160.16.63.136:80
    create 00:01:57, use 00:00:57 timeout:86400000, left 00:00:02, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211     172.16.2.13        ---                ---
    create 00:01:57, use 00:01:57 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t

PAT

conf t
!
access-list 1 permit 172.16.2.0 0.0.0.255
!
ip nat inside source list 1 interface f0/1 overload
!
int f0/0
ip nat inside
exit
int f0/1
ip nat outside
exit
!
end
pi@pi1:~ $ nc 160.16.63.136 80
GET /
pi@pi2:~ $ nc 160.16.63.136 80
GET /
pi@pi3:~ $ nc 160.16.63.136 80
GET /

Clear NAT translation entry

R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50328 172.16.2.11:50328 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38005 172.16.2.12:38005 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51506 172.16.2.13:51506 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80  160.16.63.136:80
R1#sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50328 172.16.2.11:50328 160.16.63.136:80  160.16.63.136:80
    create 00:00:23, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 3, lc_entries: 0
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80  160.16.63.136:80
    create 00:00:18, use 00:00:18 timeout:86400000, left 23:59:41, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 4, lc_entries: 0
tcp 192.168.10.210:38005 172.16.2.12:38005 160.16.63.136:80  160.16.63.136:80
    create 00:00:23, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 1, lc_entries: 0
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80  160.16.63.136:80
    create 00:00:18, use 00:00:18 timeout:86400000, left 23:59:41, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 6, lc_entries: 0
tcp 192.168.10.210:51506 172.16.2.13:51506 160.16.63.136:80  160.16.63.136:80

R1#clear ip nat translation *
R1#sh ip nat t ve
R1#sh ip nat t ve
R1#sh ip nat t
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80  160.16.63.136:80
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80  160.16.63.136:80
R1#clear ip nat translation *
R1#sh ip nat t
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80  160.16.63.136:80
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80  160.16.63.136:80
clear ip nat tra tcp in 192.168.10.210 38007 172.16.2.12 38007 out 160.16.63.136 80 160.16.63.136 80
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80  160.16.63.136:80
R1#$.10.210 38007 172.16.2.12 38007 out 160.16.63.136 80 160.16.63.136 80
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80  160.16.63.136:80

NAT etnry timeout value change

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#ip nat translat
R1(config)#ip nat translation tcp-ti
R1(config)#ip nat translation tcp-timeout 120 ne
R1(config)#ip nat translation tcp-timeout ne
R1(config)#ip nat translation tcp-timeout never
R1(config)#ip nat translation udp-timeout 60
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50331 172.16.2.11:50331 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38008 172.16.2.12:38008 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51509 172.16.2.13:51509 160.16.63.136:80  160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50331 172.16.2.11:50331 160.16.63.136:80  160.16.63.136:80
    create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 15, lc_entries: 0
tcp 192.168.10.210:38008 172.16.2.12:38008 160.16.63.136:80  160.16.63.136:80
    create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 14, lc_entries: 0
tcp 192.168.10.210:51509 172.16.2.13:51509 160.16.63.136:80  160.16.63.136:80
    create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 13, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80  160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80  160.16.63.136:80
    create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80  160.16.63.136:80
    create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80  160.16.63.136:80
    create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80  160.16.63.136:80
    create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80  160.16.63.136:80
    create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80  160.16.63.136:80
    create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh run | i timeout
crypto pki token default removal timeout 0
ip nat translation tcp-timeout never
ip nat translation udp-timeout 60
 exec-timeout 0 0
 exec-timeout 0 0
 exec-timeout 0 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50333 172.16.2.11:50333 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 19, lc_entries: 0
tcp 192.168.10.210:38010 172.16.2.12:38010 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 21, lc_entries: 0
tcp 192.168.10.210:51511 172.16.2.13:51511 160.16.63.136:80  160.16.63.136:80
    create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
R1(config)#no ip nat translation udp-timeout 60
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50333 172.16.2.11:50333 160.16.63.136:80  160.16.63.136:80
    create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 19, lc_entries: 0
tcp 192.168.10.210:38010 172.16.2.12:38010 160.16.63.136:80  160.16.63.136:80
    create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 21, lc_entries: 0
tcp 192.168.10.210:51511 172.16.2.13:51511 160.16.63.136:80  160.16.63.136:80
    create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
R1(config)#do clear ip nat t
clear ip nat t
% Incomplete command.

R1(config)#do clear ip nat tr
clear ip nat tr
% Incomplete command.

R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80  160.16.63.136:80
    create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80  160.16.63.136:80
    create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80  160.16.63.136:80
    create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80  160.16.63.136:80
    create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80  160.16.63.136:80
    create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80  160.16.63.136:80
    create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80  160.16.63.136:80
    create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80  160.16.63.136:80
    create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80  160.16.63.136:80
    create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80  160.16.63.136:80
    create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80  160.16.63.136:80
    create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80  160.16.63.136:80
    create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#ip nat translation tcp-timeout 30
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80  160.16.63.136:80
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80  160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80  160.16.63.136:80
    create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80  160.16.63.136:80
    create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 27, lc_entries: 0
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80  160.16.63.136:80
    create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 25, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80  160.16.63.136:80
    create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80  160.16.63.136:80
    create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 27, lc_entries: 0
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80  160.16.63.136:80
    create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
    flags:
extended, timing-out, use_count: 0, entry-id: 25, lc_entries: 0
R1(config)#do sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788    8.8.8.8:10788
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767    8.8.8.8:11767
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800    8.8.8.8:10800
R1(config)#ip nat tra
R1(config)#ip nat translation icm
R1(config)#ip nat translation icmp-timeout 100
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788    8.8.8.8:10788
    create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 29, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767    8.8.8.8:11767
    create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 28, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800    8.8.8.8:10800
    create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 30, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788    8.8.8.8:10788
    create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 29, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767    8.8.8.8:11767
    create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 28, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800    8.8.8.8:10800
    create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 30, lc_entries: 0
R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788    8.8.8.8:10788
    create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 33, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767    8.8.8.8:11767
    create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 32, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800    8.8.8.8:10800
    create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 31, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788    8.8.8.8:10788
    create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 33, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767    8.8.8.8:11767
    create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 32, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800    8.8.8.8:10800
    create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 31, lc_entries: 0
udp 192.168.10.210:43415 172.16.2.13:43415 8.8.8.8:53        8.8.8.8:53
    create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 35, lc_entries: 0
udp 192.168.10.210:46455 172.16.2.13:46455 8.8.8.8:53        8.8.8.8:53
    create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 34, lc_entries: 0
udp 192.168.10.210:60200 172.16.2.13:60200 8.8.8.8:53        8.8.8.8:53
Pro Inside global      Inside local       Outside local      Outside global
    create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 36, lc_entries: 0
pi@pi3:~ $ vi /etc/resolv.conf
pi@pi3:~ $ sudo vi /etc/resolv.conf
pi@pi3:~ $ nslookup www.google.co.jp
-bash: nslookup: command not found
pi@pi3:~ $ host www.google.co.jp
www.google.co.jp has address 216.58.197.163
www.google.co.jp has IPv6 address 2404:6800:4004:801::2003
pi@pi3:~ $ host www.google.co.jp
www.google.co.jp has address 216.58.197.163
www.google.co.jp has IPv6 address 2404:6800:4004:801::2003
pi@pi3:~ $ host www.google.co.jp
www.google.co.jp has address 216.58.197.163
www.google.co.jp has IPv6 address 2404:6800:4004:801::2003
R1(config)#ip nat trans dns-timeout 10
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.10.210:43536 172.16.2.13:43536 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 39, lc_entries: 0
udp 192.168.10.210:55437 172.16.2.13:55437 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
udp 192.168.10.210:56083 172.16.2.13:56083 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 38, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.10.210:43536 172.16.2.13:43536 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 39, lc_entries: 0
udp 192.168.10.210:55437 172.16.2.13:55437 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
udp 192.168.10.210:56083 172.16.2.13:56083 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 38, lc_entries: 0
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.10.210:34581 172.16.2.13:34581 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 42, lc_entries: 0
udp 192.168.10.210:43369 172.16.2.13:43369 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 41, lc_entries: 0
udp 192.168.10.210:59831 172.16.2.13:59831 8.8.8.8:53        8.8.8.8:53
    create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 40, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.10.210:34581 172.16.2.13:34581 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 42, lc_entries: 0
udp 192.168.10.210:43369 172.16.2.13:43369 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 41, lc_entries: 0
udp 192.168.10.210:59831 172.16.2.13:59831 8.8.8.8:53        8.8.8.8:53
    create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 40, lc_entries: 0
R1(config)#do sh ip nat tr ve
R1(config)#
R1(config)#ip nat translation udp-timeout 45
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.10.210:25  172.16.2.11:123    36.3.117.150:123   36.3.117.150:123
    create 00:00:08, use 00:00:08 timeout:45000, left 00:00:36, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 118, lc_entries: 0
udp 192.168.10.210:23  172.16.2.11:123    129.250.35.250:123 129.250.35.250:123
    create 00:00:37, use 00:00:37 timeout:45000, left 00:00:07, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 116, lc_entries: 0
udp 192.168.10.210:24  172.16.2.12:123    129.250.35.250:123 129.250.35.250:123
    create 00:00:34, use 00:00:34 timeout:45000, left 00:00:10, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 117, lc_entries: 0
udp 192.168.10.210:22  172.16.2.12:123    129.250.35.251:123 129.250.35.251:123
    create 00:00:41, use 00:00:41 timeout:45000, left 00:00:03, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 115, lc_entries: 0
udp 192.168.10.210:20  172.16.2.12:123    157.7.154.29:123   157.7.154.29:123
    create 00:00:41, use 00:00:41 timeout:45000, left 00:00:03, Map-Id(In): 1,
    flags:
extended, use_count: 0, entry-id: 113, lc_entries: 0
udp 192.168.10.210:21  172.16.2.12:123    216.229.4.66:123   216.229.4.66:123

References

tech/network/cisco/nat-timeout/nat-timeout.txt · Last modified: 2018/04/15 11:08 by wnoguchi