sh xlate

[sunilyk]

Hi,

I am getting one interesting output for sh xlate command.

It should show Global to Local IP mapping only once (per entry) (as far as I know). Now for perticular 2 global IPs (which are bound to private IPs using static satement) I can see multiple entries in show xlate output. Its almost 20 - 25 same statements showing global to local mapping.

Now my question.. is there any significance for this ? or why it could have taken place.

Thanks!

Sunil

[mhoda]

Hello Sunil,

This happens only when you have PAT configured. With static, this shouldn't happen unless you have port redirection configured. Without looking at the output data, its hard to say anything. Thanks,

Mynul

[sunilyk]

Hi,

There are static statements only. But I had introduced a PAT statement for temporary purpose. Then I removed it. Also done clear xlate only on tha multiple entry Global IP (I can't run clear xlate completely as it is production environment). It clears but again shows multiple entries.

Actually I noticed this even before I put the PAT statement.

One more thing from one server to other I can see 2 hops (1st to router and then the server) in tracert (for public IP) but for these 2 entries it shows directly connected.

What could be the problem for this ?

(We are using PIX-525 with 6 interfaces)

Regards,

Sunil

[jackko]

i don't think there is a problem. it's just the way pix showing you the current address translation.

[jackko]

what is the model? i believe it would happen when there are more than 2 interfaces.