What is the logging command to log NAT S & D IP in ASA Firewall.

[Tkass]

What is the logging command to log NAT S & D IP in ASA Firewall if there is any?

[tvotna]

Connection creation syslogs, e.g. 302013 include both real and mapped source/destination IPs by default. E.g.

Error Message%ASA-6-302013: Built {inbound|outbound} [Probe] TCP connection_id for interface :real-address /real-port (mapped-address/mapped-port ) [(idfw_user )] to interface :real-address /real-port (mapped-address/mapped-port ) [(idfw_user )] [(user )]

[MHM Cisco World]

Logging list toSyslog level critical 

Logging list toSyslog message 305013

This level 6 message for NAT for connection.

This not error message' but just for make you notify the conn add or remove from conn table' which you can use it to see NAT of IP.

MHM

[Tkass]

Thank you, If the NAT do its job as it configured, why would I have the Error message? can I still log NAT S & D IP address, if there is no Error message by using # logging message 302013?

[Marvin Rhoads]

It's not really an error, that's just how Cisco lists them in the guide. Reference:
https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslog-messages-302003-to-342008.html?bookSearch=true#con_4770603