User Tools
tech:network:cisco:nat-timeout:nat-timeout
Table of Contents
NAT Timeout
Common Configuration
en conf t ! ! ip configuration int f0/1 ip addr 192.168.10.210 255.255.255.0 no shut exit int f0/0 ip addr 172.16.2.1 255.255.255.0 no shut exit ! ! default route ip route 0.0.0.0 0.0.0.0 192.168.10.1 ! end
Dynamic NAT
conf t ! ip nat pool PG1X-NAT-POOL 192.168.10.211 192.168.10.212 netmask 255.255.255.248 ! access-list 1 permit 172.16.2.11 access-list 1 permit 172.16.2.12 access-list 1 permit 172.16.2.13 ! ip nat inside source list 1 pool PG1X-NAT-POOL ! int f0/1 ip nat outside exit ! int f0/0 ip nat inside exit ! end
pi@pi1:~ $ nc 160.16.63.136 80 GET / pi@pi2:~ $ nc 160.16.63.136 80 GET / pi@pi3:~ $ nc 160.16.63.136 80 GET /
Clear NAT translation entry
R1#sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.211 172.16.2.11 --- ---
create 23:10:40, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212 172.16.2.12 --- ---
create 23:10:36, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.211 172.16.2.11 --- ---
create 23:10:41, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212 172.16.2.12 --- ---
create 23:10:38, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.211 172.16.2.11 --- ---
--- 192.168.10.212 172.16.2.12 --- ---
R1#clear ip nat t *
R1#sh ip nat t
R1#
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:50325 172.16.2.11:50325 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.212 172.16.2.11 --- ---
tcp 192.168.10.211:38002 172.16.2.12:38002 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.12 --- ---
R1#sh ip nat translations ver
R1#sh ip nat translations verbose
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:50325 172.16.2.11:50325 160.16.63.136:80 160.16.63.136:80
create 00:00:24, use 00:00:22 timeout:86400000, left 00:00:37, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
--- 192.168.10.212 172.16.2.11 --- ---
create 00:00:24, use 00:00:24 timeout:86400000, left 23:59:35, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 21, lc_entries: 0
tcp 192.168.10.211:38002 172.16.2.12:38002 160.16.63.136:80 160.16.63.136:80
create 00:00:26, use 00:00:19 timeout:86400000, left 00:00:40, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
--- 192.168.10.211 172.16.2.12 --- ---
create 00:00:26, use 00:00:26 timeout:86400000, left 23:59:33, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 19, lc_entries: 0
R1#sh ip nat statistics
Total active translations: 4 (0 static, 4 dynamic; 2 extended)
Peak translations: 6, occurred 00:03:08 ago
Outside interfaces:
FastEthernet0/1
Inside interfaces:
FastEthernet0/0
Hits: 78 Misses: 0
CEF Translated packets: 78, CEF Punted packets: 7
Expired translations: 2
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 1 pool PG1X-NAT-POOL refcount 4
pool PG1X-NAT-POOL: netmask 255.255.255.248
start 192.168.10.211 end 192.168.10.212
type generic, total addresses 2, allocated 2 (100%), misses 7
Total doors: 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0
R1#clear ip nat trans
R1#clear ip nat translation
% Incomplete command.
R1#clear ip nat translation *
R1#sh ip nat translations
R1#sh ip nat translations verbose
R1#sh ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Peak translations: 6, occurred 00:03:41 ago
Outside interfaces:
FastEthernet0/1
Inside interfaces:
FastEthernet0/0
Hits: 78 Misses: 0
CEF Translated packets: 78, CEF Punted packets: 7
Expired translations: 2
Dynamic mappings:
-- Inside Source
[Id: 1] access-list 1 pool PG1X-NAT-POOL refcount 0
pool PG1X-NAT-POOL: netmask 255.255.255.248
start 192.168.10.211 end 192.168.10.212
type generic, total addresses 2, allocated 0 (0%), misses 7
Total doors: 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0
clear ip nat translation inside 192.168.10.211 172.16.2.12 clear ip nat translation tcp inside 192.168.10.211 51504 172.16.2.13 51504 outside 160.16.63.136 80 160.16.63.136 80
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:50326 172.16.2.11:50326 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.212 172.16.2.11 --- ---
tcp 192.168.10.211:38003 172.16.2.12:38003 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.12 --- ---
R1#sh ip nat translations verbose
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:50326 172.16.2.11:50326 160.16.63.136:80 160.16.63.136:80
create 00:00:24, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
--- 192.168.10.212 172.16.2.11 --- ---
create 00:00:24, use 00:00:24 timeout:86400000, left 23:59:35, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 25, lc_entries: 0
tcp 192.168.10.211:38003 172.16.2.12:38003 160.16.63.136:80 160.16.63.136:80
create 00:00:28, use 00:00:16 timeout:86400000, left 00:00:43, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
--- 192.168.10.211 172.16.2.12 --- ---
create 00:00:28, use 00:00:28 timeout:86400000, left 23:59:31, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 23, lc_entries: 0
R1#clear ip nat transl
R1#clear ip nat translation insi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.11
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.211 172.16.2.12 --- ---
R1#clar ip nat translation inside 192.168.10.211
^
% Invalid input detected at '^' marker.
R1#clar ip nat translation inside 192.168.10.211 172.16.2.12
^
% Invalid input detected at '^' marker.
R1#clear ip nat translation inside 192.168.10.211 172.16.2.12
R1#sh ip nat translations
R1#! generate communicastion
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:38004 172.16.2.12:38004 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.212 172.16.2.12 --- ---
tcp 192.168.10.211:51500 172.16.2.13:51500 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.212:38004 172.16.2.12:38004 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.212 172.16.2.12 --- ---
tcp 192.168.10.211:51500 172.16.2.13:51500 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1#clear ip nat translations
R1#clear ip nat translation?
translation
R1#clear ip nat translation insi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.12 outsi
R1#clear ip nat translation inside 192.168.10.212 172.16.2.12 outside ?
A.B.C.D Local IP address
R1#$ion inside 192.168.10.212 172.16.2.12 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
--- 192.168.10.211 172.16.2.13 --- ---
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
tcp 192.168.10.211:51501 172.16.2.13:51501 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1#$ion inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
tcp 192.168.10.211:51501 172.16.2.13:51501 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1#$0.211:51501 172.16.2.13:51501 outside 160.16.63.136:80 160.16.63.136:80
clear ip nat translation inside 192.168.10.211:51501 172.16.2.13:51501 outside 1 ^60.16.63.136:80 160.16.63.136:80
% Invalid input detected at '^' marker.
R1#sh ip nat transla
R1#sh ip nat translations ?
esp Show ESP entries
global Display entries in Global/Dest Table - NVI
icmp Show ICMP entries
pptp Show PPTP entries
tcp Show TCP entries
udp Show UDP entries
verbose Show extra information
vrf Display entries of VRF instance
| Output modifiers
<cr>
R1#clear ip nat trans
R1#clear ip nat translation insi
R1#clear ip nat translation inside ?
A.B.C.D Global IP address
R1#clear ip nat translation inside 192.168.10.211 172.16.2.13 ?
forced Delete all dynamic translations (forcefully)
outside Outside addresses (and ports)
<cr>
R1#clear ip nat translation inside 192.168.10.211 172.16.2.13 outsi
R1#$t translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136?
A.B.C.D
R1#$t translation inside 192.168.10.211 172.16.2.13 outside ?
A.B.C.D Local IP address
R1#$t translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 ?
A.B.C.D Global IP address
R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136 ?
<cr>
R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#sh ip nat trans | i :
R1#sh ip nat trans | i :
tcp 192.168.10.211:51502 172.16.2.13:51502 160.16.63.136:80 160.16.63.136:80
R1#$0.211:51502 172.16.2.13:51502 outside 160.16.63.136:80 160.16.63.136:80
clear ip nat translation inside 192.168.10.211:51502 172.16.2.13:51502 outside 1 ^60.16.63.136:80 160.16.63.136:80
% Invalid input detected at '^' marker.
R1#sh ip nat trans | i :
tcp 192.168.10.211:51502 172.16.2.13:51502 160.16.63.136:80 160.16.63.136:80
R1#
R1#$ion inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 160.16.63.136
%Translation not found
R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136:80 160.16.63.136:80
clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136
:80 160.16.63.136:80
^
% Invalid input detected at '^' marker.
R1#$ 192.168.10.211 172.16.2.13 outside 160.16.63.136 80 160.16.63.136 80
clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136
80 160.16.63.136 80
^
% Invalid input detected at '^' marker.
R1#sh ip nat trans | i :
R1#sh ip nat trans | i :
tcp 192.168.10.211:51503 172.16.2.13:51503 160.16.63.136:80 160.16.63.136:80
R1#$0.211 51503 172.16.2.13 51503 outside 160.16.63.136 80 160.16.63.136 80
clear ip nat translation inside 192.168.10.211 51503 172.16.2.13 51503 outside 1 ^60.16.63.136 80 160.16.63.136 80
% Invalid input detected at '^' marker.
R1#$0.211 51503 172.16.2.13 51503 outside 160.16.63.136 80 160.16.63.136 80
clear ip nat translation inside 192.168.10.211 51503 172.16.2.13 51503 outside 1 ^60.16.63.136 80 160.16.63.136 80
% Invalid input detected at '^' marker.
R1#sh ip nat trans | i :
tcp 192.168.10.211:51503 172.16.2.13:51503 160.16.63.136:80 160.16.63.136:80
R1#cle
R1#clear ip nat
R1#clear ip nat trasn
R1#clear ip nat trans
R1#clear ip nat translation ?
* Delete all dynamic translations
esp Encapsulating Security Payload
forced Delete all dynamic translations (forcefully)
inside Inside addresses (and ports)
outside Outside addresses (and ports)
piggyback-internal Delete all dynamic translations created off of
piggyback-data
tcp Transmission Control Protocol
udp User Datagram Protocol
vrf Clear entries of VRF instance
R1#clear ip nat translation tc
R1#clear ip nat translation tcp ins
R1#$51503 172.16.2.13 51503 outside 160.16.63.136 80 160.16.63.136 80
%Translation not found
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
--- 192.168.10.211 172.16.2.13 --- ---
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
tcp 192.168.10.211:51504 172.16.2.13:51504 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1#$51504 172.16.2.13 51504 outside 160.16.63.136 80 160.16.63.136 80
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
--- 192.168.10.211 172.16.2.13 --- ---
! NG clear ip nat translation inside 192.168.10.211 172.16.2.13 outside 160.16.63.136 80 160.16.63.136 80 ! OK clear ip nat translation tcp inside 192.168.10.211 51504 172.16.2.13 51504 outside 160.16.63.136 80 160.16.63.136 80
NAT etnry timeout value change
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
--- 192.168.10.211 172.16.2.13 --- ---
R1#sh ip nat verbose
^
% Invalid input detected at '^' marker.
R1#sh ip nat translations verbose
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
create 00:23:56, use 00:23:56 timeout:86400000, left 23:36:03, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 29, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:23:56, use 00:10:43 timeout:86400000, left 23:49:16, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 27, lc_entries: 0
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#ip nat translation
R1(config)#ip nat translation ti
R1(config)#ip nat translation timeout 60
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
--- 192.168.10.211 172.16.2.13 --- ---
R1(config)#sh ip nat t ve
^
% Invalid input detected at '^' marker.
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
--- 192.168.10.212 172.16.2.12 --- ---
create 00:26:36, use 00:26:36 timeout:86400000, left 23:33:23, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 29, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:26:36, use 00:13:23 timeout:86400000, left 23:46:36, Map-Id(In): 1,
flags:
none, use_count: 0, entry-id: 27, lc_entries: 0
R1(config)#do ip clear ip nat t *
ip clear ip nat t *
^
% Invalid input detected at '^' marker.
R1(config)#do ip clear ip nat tr *
ip clear ip nat tr *
^
% Invalid input detected at '^' marker.
R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat t
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:00:11, use 00:00:11 timeout:86400000, left 23:59:48, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:00:11, use 00:00:11 timeout:60000, left 00:00:48, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:00:58, use 00:00:58 timeout:86400000, left 23:59:01, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:00:58, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
--- 192.168.10.211 172.16.2.13 --- ---
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:08, use 00:00:08 timeout:86400000, left 00:00:51, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:08, use 00:01:08 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:12, use 00:00:12 timeout:86400000, left 00:00:47, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:12, use 00:01:12 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:17, use 00:00:16 timeout:86400000, left 00:00:43, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:17, use 00:01:17 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:30, use 00:00:30 timeout:86400000, left 00:00:29, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:30, use 00:01:30 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:49, use 00:00:49 timeout:86400000, left 00:00:10, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:49, use 00:01:49 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:53, use 00:00:53 timeout:86400000, left 00:00:06, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:53, use 00:01:53 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.211:51505 172.16.2.13:51505 160.16.63.136:80 160.16.63.136:80
create 00:01:57, use 00:00:57 timeout:86400000, left 00:00:02, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 37, lc_entries: 0
--- 192.168.10.211 172.16.2.13 --- ---
create 00:01:57, use 00:01:57 timeout:60000, timing-out, Map-Id(In): 1,
flags:
none, use_count: 1, entry-id: 36, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t
PAT
conf t ! access-list 1 permit 172.16.2.0 0.0.0.255 ! ip nat inside source list 1 interface f0/1 overload ! int f0/0 ip nat inside exit int f0/1 ip nat outside exit ! end
pi@pi1:~ $ nc 160.16.63.136 80 GET / pi@pi2:~ $ nc 160.16.63.136 80 GET / pi@pi3:~ $ nc 160.16.63.136 80 GET /
Clear NAT translation entry
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50328 172.16.2.11:50328 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38005 172.16.2.12:38005 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51506 172.16.2.13:51506 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80 160.16.63.136:80
R1#sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50328 172.16.2.11:50328 160.16.63.136:80 160.16.63.136:80
create 00:00:23, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 3, lc_entries: 0
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80 160.16.63.136:80
create 00:00:18, use 00:00:18 timeout:86400000, left 23:59:41, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 4, lc_entries: 0
tcp 192.168.10.210:38005 172.16.2.12:38005 160.16.63.136:80 160.16.63.136:80
create 00:00:23, use 00:00:20 timeout:86400000, left 00:00:39, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 1, lc_entries: 0
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80 160.16.63.136:80
create 00:00:18, use 00:00:18 timeout:86400000, left 23:59:41, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 6, lc_entries: 0
tcp 192.168.10.210:51506 172.16.2.13:51506 160.16.63.136:80 160.16.63.136:80
R1#clear ip nat translation *
R1#sh ip nat t ve
R1#sh ip nat t ve
R1#sh ip nat t
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80 160.16.63.136:80
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50329 172.16.2.11:50329 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38006 172.16.2.12:38006 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51507 172.16.2.13:51507 160.16.63.136:80 160.16.63.136:80
R1#clear ip nat translation *
R1#sh ip nat t
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80 160.16.63.136:80
R1#sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80 160.16.63.136:80
clear ip nat tra tcp in 192.168.10.210 38007 172.16.2.12 38007 out 160.16.63.136 80 160.16.63.136 80
R1#sh ip nat t Pro Inside global Inside local Outside local Outside global tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80 160.16.63.136:80 tcp 192.168.10.210:38007 172.16.2.12:38007 160.16.63.136:80 160.16.63.136:80 tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80 160.16.63.136:80 R1#$.10.210 38007 172.16.2.12 38007 out 160.16.63.136 80 160.16.63.136 80 R1#sh ip nat t Pro Inside global Inside local Outside local Outside global tcp 192.168.10.210:50330 172.16.2.11:50330 160.16.63.136:80 160.16.63.136:80 tcp 192.168.10.210:51508 172.16.2.13:51508 160.16.63.136:80 160.16.63.136:80
NAT etnry timeout value change
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#ip nat translat
R1(config)#ip nat translation tcp-ti
R1(config)#ip nat translation tcp-timeout 120 ne
R1(config)#ip nat translation tcp-timeout ne
R1(config)#ip nat translation tcp-timeout never
R1(config)#ip nat translation udp-timeout 60
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50331 172.16.2.11:50331 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38008 172.16.2.12:38008 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51509 172.16.2.13:51509 160.16.63.136:80 160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50331 172.16.2.11:50331 160.16.63.136:80 160.16.63.136:80
create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 15, lc_entries: 0
tcp 192.168.10.210:38008 172.16.2.12:38008 160.16.63.136:80 160.16.63.136:80
create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 14, lc_entries: 0
tcp 192.168.10.210:51509 172.16.2.13:51509 160.16.63.136:80 160.16.63.136:80
create 00:01:47, use 00:00:47 timeout:86400000, left 00:00:12, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 13, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80 160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:08 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80 160.16.63.136:80
create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80 160.16.63.136:80
create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80 160.16.63.136:80
create 00:00:17, use 00:00:17 timeout:60000, timing-out, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50332 172.16.2.11:50332 160.16.63.136:80 160.16.63.136:80
create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 18, lc_entries: 0
tcp 192.168.10.210:38009 172.16.2.12:38009 160.16.63.136:80 160.16.63.136:80
create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 16, lc_entries: 0
tcp 192.168.10.210:51510 172.16.2.13:51510 160.16.63.136:80 160.16.63.136:80
create 00:01:22, use 00:00:22 timeout:60000, left 00:00:37, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 17, lc_entries: 0
R1(config)#do sh run | i timeout
crypto pki token default removal timeout 0
ip nat translation tcp-timeout never
ip nat translation udp-timeout 60
exec-timeout 0 0
exec-timeout 0 0
exec-timeout 0 0
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50333 172.16.2.11:50333 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 19, lc_entries: 0
tcp 192.168.10.210:38010 172.16.2.12:38010 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 21, lc_entries: 0
tcp 192.168.10.210:51511 172.16.2.13:51511 160.16.63.136:80 160.16.63.136:80
create 00:00:08, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
R1(config)#no ip nat translation udp-timeout 60
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50333 172.16.2.11:50333 160.16.63.136:80 160.16.63.136:80
create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 19, lc_entries: 0
tcp 192.168.10.210:38010 172.16.2.12:38010 160.16.63.136:80 160.16.63.136:80
create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 21, lc_entries: 0
tcp 192.168.10.210:51511 172.16.2.13:51511 160.16.63.136:80 160.16.63.136:80
create 00:00:49, use 00:00:46 timeout:60000, left 00:00:13, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 20, lc_entries: 0
R1(config)#do clear ip nat t
clear ip nat t
% Incomplete command.
R1(config)#do clear ip nat tr
clear ip nat tr
% Incomplete command.
R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat t ve
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80 160.16.63.136:80
create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80 160.16.63.136:80
create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80 160.16.63.136:80
create 00:00:16, use 00:00:13 timeout:60000, left 00:00:46, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80 160.16.63.136:80
create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80 160.16.63.136:80
create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80 160.16.63.136:80
create 00:00:39, use 00:00:36 timeout:60000, left 00:00:23, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80 160.16.63.136:80
create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80 160.16.63.136:80
create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80 160.16.63.136:80
create 00:00:59, use 00:00:55 timeout:60000, left 00:00:04, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50334 172.16.2.11:50334 160.16.63.136:80 160.16.63.136:80
create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 23, lc_entries: 0
tcp 192.168.10.210:38011 172.16.2.12:38011 160.16.63.136:80 160.16.63.136:80
create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 24, lc_entries: 0
tcp 192.168.10.210:51512 172.16.2.13:51512 160.16.63.136:80 160.16.63.136:80
create 00:01:01, use 00:00:58 timeout:60000, left 00:00:01, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 22, lc_entries: 0
R1(config)#do sh ip nat t ve
R1(config)#ip nat translation tcp-timeout 30
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80 160.16.63.136:80
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80 160.16.63.136:80
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80 160.16.63.136:80
create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80 160.16.63.136:80
create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 27, lc_entries: 0
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80 160.16.63.136:80
create 00:00:14, use 00:00:11 timeout:30000, left 00:00:48, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 25, lc_entries: 0
R1(config)#do sh ip nat t ve
Pro Inside global Inside local Outside local Outside global
tcp 192.168.10.210:50335 172.16.2.11:50335 160.16.63.136:80 160.16.63.136:80
create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 26, lc_entries: 0
tcp 192.168.10.210:38012 172.16.2.12:38012 160.16.63.136:80 160.16.63.136:80
create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 27, lc_entries: 0
tcp 192.168.10.210:51513 172.16.2.13:51513 160.16.63.136:80 160.16.63.136:80
create 00:00:43, use 00:00:40 timeout:30000, left 00:00:19, Map-Id(In): 1,
flags:
extended, timing-out, use_count: 0, entry-id: 25, lc_entries: 0
R1(config)#do sh ip nat t
Pro Inside global Inside local Outside local Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788 8.8.8.8:10788
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767 8.8.8.8:11767
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800 8.8.8.8:10800
R1(config)#ip nat tra
R1(config)#ip nat translation icm
R1(config)#ip nat translation icmp-timeout 100
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788 8.8.8.8:10788
create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 29, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767 8.8.8.8:11767
create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 28, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800 8.8.8.8:10800
create 00:00:41, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 30, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788 8.8.8.8:10788
create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 29, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767 8.8.8.8:11767
create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 28, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800 8.8.8.8:10800
create 00:00:47, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 30, lc_entries: 0
R1(config)#do clear ip nat tr *
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788 8.8.8.8:10788
create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 33, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767 8.8.8.8:11767
create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 32, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800 8.8.8.8:10800
create 00:00:02, use 00:00:00 timeout:100000, left 00:01:39, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 31, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
icmp 192.168.10.210:10788 172.16.2.11:10788 8.8.8.8:10788 8.8.8.8:10788
create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 33, lc_entries: 0
icmp 192.168.10.210:11767 172.16.2.12:11767 8.8.8.8:11767 8.8.8.8:11767
create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 32, lc_entries: 0
icmp 192.168.10.210:10800 172.16.2.13:10800 8.8.8.8:10800 8.8.8.8:10800
create 00:02:16, use 00:01:35 timeout:100000, left 00:00:04, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 31, lc_entries: 0
udp 192.168.10.210:43415 172.16.2.13:43415 8.8.8.8:53 8.8.8.8:53
create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 35, lc_entries: 0
udp 192.168.10.210:46455 172.16.2.13:46455 8.8.8.8:53 8.8.8.8:53
create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 34, lc_entries: 0
udp 192.168.10.210:60200 172.16.2.13:60200 8.8.8.8:53 8.8.8.8:53
Pro Inside global Inside local Outside local Outside global
create 00:00:04, use 00:00:04 timeout:60000, left 00:00:55, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 36, lc_entries: 0
pi@pi3:~ $ vi /etc/resolv.conf pi@pi3:~ $ sudo vi /etc/resolv.conf pi@pi3:~ $ nslookup www.google.co.jp -bash: nslookup: command not found pi@pi3:~ $ host www.google.co.jp www.google.co.jp has address 216.58.197.163 www.google.co.jp has IPv6 address 2404:6800:4004:801::2003 pi@pi3:~ $ host www.google.co.jp www.google.co.jp has address 216.58.197.163 www.google.co.jp has IPv6 address 2404:6800:4004:801::2003 pi@pi3:~ $ host www.google.co.jp www.google.co.jp has address 216.58.197.163 www.google.co.jp has IPv6 address 2404:6800:4004:801::2003
R1(config)#ip nat trans dns-timeout 10
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
udp 192.168.10.210:43536 172.16.2.13:43536 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 39, lc_entries: 0
udp 192.168.10.210:55437 172.16.2.13:55437 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
udp 192.168.10.210:56083 172.16.2.13:56083 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 38, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
udp 192.168.10.210:43536 172.16.2.13:43536 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 39, lc_entries: 0
udp 192.168.10.210:55437 172.16.2.13:55437 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 37, lc_entries: 0
udp 192.168.10.210:56083 172.16.2.13:56083 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 38, lc_entries: 0
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
udp 192.168.10.210:34581 172.16.2.13:34581 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 42, lc_entries: 0
udp 192.168.10.210:43369 172.16.2.13:43369 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 41, lc_entries: 0
udp 192.168.10.210:59831 172.16.2.13:59831 8.8.8.8:53 8.8.8.8:53
create 00:00:03, use 00:00:03 timeout:10000, left 00:00:06, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 40, lc_entries: 0
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
udp 192.168.10.210:34581 172.16.2.13:34581 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 42, lc_entries: 0
udp 192.168.10.210:43369 172.16.2.13:43369 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 41, lc_entries: 0
udp 192.168.10.210:59831 172.16.2.13:59831 8.8.8.8:53 8.8.8.8:53
create 00:00:09, use 00:00:09 timeout:10000, left 00:00:00, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 40, lc_entries: 0
R1(config)#do sh ip nat tr ve
R1(config)#
R1(config)#ip nat translation udp-timeout 45
R1(config)#do sh ip nat tr ve
R1(config)#do sh ip nat tr ve
Pro Inside global Inside local Outside local Outside global
udp 192.168.10.210:25 172.16.2.11:123 36.3.117.150:123 36.3.117.150:123
create 00:00:08, use 00:00:08 timeout:45000, left 00:00:36, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 118, lc_entries: 0
udp 192.168.10.210:23 172.16.2.11:123 129.250.35.250:123 129.250.35.250:123
create 00:00:37, use 00:00:37 timeout:45000, left 00:00:07, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 116, lc_entries: 0
udp 192.168.10.210:24 172.16.2.12:123 129.250.35.250:123 129.250.35.250:123
create 00:00:34, use 00:00:34 timeout:45000, left 00:00:10, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 117, lc_entries: 0
udp 192.168.10.210:22 172.16.2.12:123 129.250.35.251:123 129.250.35.251:123
create 00:00:41, use 00:00:41 timeout:45000, left 00:00:03, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 115, lc_entries: 0
udp 192.168.10.210:20 172.16.2.12:123 157.7.154.29:123 157.7.154.29:123
create 00:00:41, use 00:00:41 timeout:45000, left 00:00:03, Map-Id(In): 1,
flags:
extended, use_count: 0, entry-id: 113, lc_entries: 0
udp 192.168.10.210:21 172.16.2.12:123 216.229.4.66:123 216.229.4.66:123
References
tech/network/cisco/nat-timeout/nat-timeout.txt · Last modified: 2018/04/15 11:08 by wnoguchi
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
