topic Re: how to view the nat ID for a device in FMC in Network Security

how to view the nat ID for a device in FMC

jessica jestol — Fri, 21 Feb 2020 17:29:49 GMT

How do you find the NAT id for a device in FMC? I had a module become corrupted. I recovered it. Now I need to reconfigure the network so I need the NAT id.

Re: how to view the nat ID for a device in FMC

Rob Ingram — Sat, 14 Sep 2019 23:44:23 GMT

Hi,

To confirm the NAT ID, from the CLI type expert to login to expert mode and enter the command sudo tail -f /etc/sf/sftunnel.conf

HTH

Re: how to view the nat ID for a device in FMC

Marvin Rhoads — Sun, 15 Sep 2019 02:56:57 GMT

That will work although you don't have to sudo to run the command.

Also, "tail -f" will only show the last 10 lines and watch for new output. The peer info of interest may be more than 10 lines up from the end of the file.

I'd suggest simply "cat /etc/sf/sftunnel.conf".

Re: how to view the nat ID for a device in FMC

jessica jestol — Tue, 17 Sep 2019 20:02:01 GMT

I'm looking at sftunnel.conf and I'm not seeing anything like the NAT ID. What should I be looking for?

Re: how to view the nat ID for a device in FMC

Rob Ingram — Wed, 18 Sep 2019 14:38:00 GMT

Hi,

The "uuid" value is the nat ID. E.g:-

admin@FTD-1:~$ tail -f /etc/sf/sftunnel.conf
role 1;
host 192.168.10.42;
ip 192.168.10.42;
reg_key Cisco1234;
uuid ~THISISTHENATID;

HTH

Re: how to view the nat ID for a device in FMC

Marvin Rhoads — Wed, 18 Sep 2019 15:00:44 GMT

Also, NAT ID is optional so there might indeed be none in your setup.

Re: how to view the nat ID for a device in FMC

jessica jestol — Wed, 18 Sep 2019 17:55:39 GMT

my UUID is the same as the regkey. Info scrubbed for security.

 10.0.0.10
    {
        role 2;
        reg_key 01754548-9a82-14g7-a323-ab9bfb85r738;
        ip 10.0.0.10;
        host 10.0.0.10;
        sw_version 6.2.3.4;
        upgrade_version ;
        uuid 01754548-9a82-14g7-a323-ab9bfb85r738;
        priority 0;
    }

Re: how to view the nat ID for a device in FMC

jessica jestol — Wed, 18 Sep 2019 17:58:08 GMT

My FMC is in a datacenter that only has vpn access to another datacenter so I have a u-turn NAT to get to the sensors. The FMC/sensors can't connect unless I use the NAT ID.