cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
893
Views
0
Helpful
1
Replies

ASA Active/Stale Xlate Entries

ITforever
Level 1
Level 1

Hello,

 

I have been trying to analyse existing traffic on an ASA and need to figure out active (not stale) xlate info.

If I issue 'show xlate' , it gives me:

Global 192.168.1.1 Local 172.16.1.1

 

So, how do I find out that if this entry  is actually active (not stale)?

 

And also, how different is it from 'show nat' output?

 

Thanks.

1 Reply 1

mkazam001
Level 3
Level 3

sh xlate will give you the current active nat translations, they will be removed when they timeout.

sh nat will show the actual nat table based on the nat rules configured on the asa, as well the order in which they will be applied.

Hope that helps.

Azam

Review Cisco Networking for a $25 gift card