cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
26981
Views
20
Helpful
19
Replies

Command "Show ip nat translations" doesnt output anything

Rui Fernandes
Level 1
Level 1

I already tried 2 different ways (2 pictures attached) of configure IP Dynamic NAT and both still doesn't output anything. I saw other posts and I already tried to change the mask to 0.255.255.255 but it still doesn't working. Someone can help?

1 Accepted Solution

Accepted Solutions

Hello,

 

I opened the file, and I think the problem might be that you are trying to ping 193.137.68.2. The only NAT that will happen is when you ping 193.137.68.1, which is the other side of the outside NAT interface. You will not see any NAT entries when you ping 193.137.68.2, because nothing will be translated. The traffic that is being NATted has to go THROUGH the outside interface.

 

Below are the NAT entries when I ping 193.137.68.1 from various PCs:

 

Router#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 193.137.68.2:10 10.11.68.131:10 193.137.68.1:10 193.137.68.1:10
icmp 193.137.68.2:11 10.11.68.131:11 193.137.68.1:11 193.137.68.1:11
icmp 193.137.68.2:12 10.11.68.131:12 193.137.68.1:12 193.137.68.1:12
icmp 193.137.68.2:13 10.11.68.131:13 193.137.68.1:13 193.137.68.1:13
icmp 193.137.68.2:14 10.11.68.131:14 193.137.68.1:14 193.137.68.1:14
icmp 193.137.68.2:15 10.11.68.131:15 193.137.68.1:15 193.137.68.1:15
icmp 193.137.68.2:16 10.11.68.131:16 193.137.68.1:16 193.137.68.1:16
icmp 193.137.68.2:2 10.11.68.131:2 193.137.68.1:2 193.137.68.1:2
icmp 193.137.68.2:3 10.11.68.131:3 193.137.68.1:3 193.137.68.1:3
icmp 193.137.68.2:4 10.11.68.131:4 193.137.68.1:4 193.137.68.1:4
icmp 193.137.68.2:5 10.11.68.131:5 193.137.68.1:5 193.137.68.1:5
icmp 193.137.68.2:6 10.11.68.131:6 193.137.68.1:6 193.137.68.1:6
icmp 193.137.68.2:7 10.11.68.131:7 193.137.68.1:7 193.137.68.1:7
icmp 193.137.68.2:8 10.11.68.131:8 193.137.68.1:8 193.137.68.1:8
icmp 193.137.68.2:9 10.11.68.131:9 193.137.68.1:9 193.137.68.1:9

Router#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 193.137.68.2:100 10.11.68.131:100 193.137.68.1:100 193.137.68.1:100
icmp 193.137.68.2:101 10.11.68.131:101 193.137.68.1:101 193.137.68.1:101
icmp 193.137.68.2:102 10.11.68.131:102 193.137.68.1:102 193.137.68.1:102
icmp 193.137.68.2:103 10.11.68.131:103 193.137.68.1:103 193.137.68.1:103
icmp 193.137.68.2:104 10.11.68.131:104 193.137.68.1:104 193.137.68.1:104
icmp 193.137.68.2:105 10.11.68.131:105 193.137.68.1:105 193.137.68.1:105
icmp 193.137.68.2:106 10.11.68.131:106 193.137.68.1:106 193.137.68.1:106
icmp 193.137.68.2:107 10.11.68.131:107 193.137.68.1:107 193.137.68.1:107
icmp 193.137.68.2:108 10.11.68.131:108 193.137.68.1:108 193.137.68.1:108
icmp 193.137.68.2:109 10.11.68.131:109 193.137.68.1:109 193.137.68.1:109
icmp 193.137.68.2:110 10.11.68.131:110 193.137.68.1:110 193.137.68.1:110
icmp 193.137.68.2:111 10.11.68.131:111 193.137.68.1:111 193.137.68.1:111
icmp 193.137.68.2:112 10.11.68.131:112 193.137.68.1:112 193.137.68.1:112
icmp 193.137.68.2:113 10.11.68.131:113 193.137.68.1:113 193.137.68.1:113
icmp 193.137.68.2:114 10.11.68.131:114 193.137.68.1:114 193.137.68.1:114
icmp 193.137.68.2:115 10.11.68.131:115 193.137.68.1:115 193.137.68.1:115
icmp 193.137.68.2:116 10.11.68.131:116 193.137.68.1:116 193.137.68.1:116
icmp 193.137.68.2:117 10.11.68.131:117 193.137.68.1:117 193.137.68.1:117
icmp 193.137.68.2:118 10.11.68.131:118 193.137.68.1:118 193.137.68.1:118
icmp 193.137.68.2:119 10.11.68.131:119 193.137.68.1:119 193.137.68.1:119
icmp 193.137.68.2:120 10.11.68.131:120 193.137.68.1:120 193.137.68.1:120
icmp 193.137.68.2:121 10.11.68.131:121 193.137.68.1:121 193.137.68.1:121
icmp 193.137.68.2:122 10.11.68.131:122 193.137.68.1:122 193.137.68.1:122
icmp 193.137.68.2:123 10.11.68.131:123 193.137.68.1:123 193.137.68.1:123
icmp 193.137.68.2:124 10.11.68.131:124 193.137.68.1:124 193.137.68.1:124
icmp 193.137.68.2:125 10.11.68.131:125 193.137.68.1:125 193.137.68.1:125
icmp 193.137.68.2:126 10.11.68.131:126 193.137.68.1:126 193.137.68.1:126
icmp 193.137.68.2:127 10.11.68.131:127 193.137.68.1:127 193.137.68.1:127
icmp 193.137.68.2:128 10.11.68.131:128 193.137.68.1:128 193.137.68.1:128
icmp 193.137.68.2:129 10.11.68.131:129 193.137.68.1:129 193.137.68.1:129
icmp 193.137.68.2:130 10.11.68.131:130 193.137.68.1:130 193.137.68.1:130
icmp 193.137.68.2:131 10.11.68.131:131 193.137.68.1:131 193.137.68.1:131
icmp 193.137.68.2:2 10.11.68.194:2 193.137.68.1:2 193.137.68.1:2
icmp 193.137.68.2:3 10.11.68.194:3 193.137.68.1:3 193.137.68.1:3
icmp 193.137.68.2:4 10.11.68.194:4 193.137.68.1:4 193.137.68.1:4
icmp 193.137.68.2:72 10.11.68.131:72 193.137.68.1:72 193.137.68.1:72
icmp 193.137.68.2:73 10.11.68.131:73 193.137.68.1:73 193.137.68.1:73
icmp 193.137.68.2:74 10.11.68.131:74 193.137.68.1:74 193.137.68.1:74
icmp 193.137.68.2:75 10.11.68.131:75 193.137.68.1:75 193.137.68.1:75
icmp 193.137.68.2:76 10.11.68.131:76 193.137.68.1:76 193.137.68.1:76
icmp 193.137.68.2:77 10.11.68.131:77 193.137.68.1:77 193.137.68.1:77
icmp 193.137.68.2:78 10.11.68.131:78 193.137.68.1:78 193.137.68.1:78
icmp 193.137.68.2:79 10.11.68.131:79 193.137.68.1:79 193.137.68.1:79
icmp 193.137.68.2:80 10.11.68.131:80 193.137.68.1:80 193.137.68.1:80
icmp 193.137.68.2:81 10.11.68.131:81 193.137.68.1:81 193.137.68.1:81
icmp 193.137.68.2:82 10.11.68.131:82 193.137.68.1:82 193.137.68.1:82
icmp 193.137.68.2:83 10.11.68.131:83 193.137.68.1:83 193.137.68.1:83
icmp 193.137.68.2:84 10.11.68.131:84 193.137.68.1:84 193.137.68.1:84
icmp 193.137.68.2:85 10.11.68.131:85 193.137.68.1:85 193.137.68.1:85
icmp 193.137.68.2:86 10.11.68.131:86 193.137.68.1:86 193.137.68.1:86
icmp 193.137.68.2:87 10.11.68.131:87 193.137.68.1:87 193.137.68.1:87
icmp 193.137.68.2:88 10.11.68.131:88 193.137.68.1:88 193.137.68.1:88
icmp 193.137.68.2:89 10.11.68.131:89 193.137.68.1:89 193.137.68.1:89
icmp 193.137.68.2:90 10.11.68.131:90 193.137.68.1:90 193.137.68.1:90
icmp 193.137.68.2:91 10.11.68.131:91 193.137.68.1:91 193.137.68.1:91
icmp 193.137.68.2:92 10.11.68.131:92 193.137.68.1:92 193.137.68.1:92
icmp 193.137.68.2:93 10.11.68.131:93 193.137.68.1:93 193.137.68.1:93
icmp 193.137.68.2:94 10.11.68.131:94 193.137.68.1:94 193.137.68.1:94
icmp 193.137.68.2:95 10.11.68.131:95 193.137.68.1:95 193.137.68.1:95
icmp 193.137.68.2:96 10.11.68.131:96 193.137.68.1:96 193.137.68.1:96
icmp 193.137.68.2:97 10.11.68.131:97 193.137.68.1:97 193.137.68.1:97
icmp 193.137.68.2:98 10.11.68.131:98 193.137.68.1:98 193.137.68.1:98
icmp 193.137.68.2:99 10.11.68.131:99 193.137.68.1:99 193.137.68.1:99

View solution in original post

19 Replies 19

Hello
sh ip arp
sh ip route 


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

 

Would you post the output of show arp? Are you sure that there are devices connected in the 2 inside subnets and that some of them have attempted to access something outside?

HTH

Rick

In the images below you can see the "show arp" output and the network architecture.

Thanks for the additional information. The ip route information verifies that there is a default route with fa5/0 as the outbound interface. The arp output does verify that there is a connected device on fa5/0 which is configured as nat outside, and there is a connected device on fa4/0 which should still be configured as nat inside. Assuming that the config has not changed it should be correct and with connected devices. So the remaining question is whether you can verify that the host connected on fa4/0 has actually attempted to access something outside.

HTH

Rick

After run the commands,

int fa4/0

ip nat inside

there is a print of simulation of 3 different PCS connecting to ISP router.

Richard Burts
Hall of Fame
Hall of Fame

In your bug_2 output your syntax is not correct. In your translation statement you have the work list but not the list number. I am a bit surprised that this did not generate some syntax error when you entered it, but I believe that this is the reason there is no output.

 

In your second set of output we do not see any interfaces that have addresses in the 10.0.0 address space. Are there interfaces in that range? If so what are they? This could be the reason for no output here.

HTH

Rick

Thanks for trying to help, I noticed the error in the access list but even correcting I have no output.

 

I don't understand the second point. I intend to connect 3 LANS to a router that connects to a public router. You can see the connection diagram in the figure below (ex.png) where the routers are already configured with IP routing table.

Hello

Okay so your config look good -apart from the mis-type with you acl you could try the following:

no ip nat inside source list pool POOL overload 

ip nat inside source-list 1 interface fa0/5


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

 

Hello,

 

post the full running configuration (sh run), maybe we can spot something else that causes the router to not translate anything...

 

Hello

The Nat configuration on your wan rtr at this time looks okay and you have active hosts however between the lan hosts and this nat wan rtr are two other rtrs and its possible the routing in-between is incomplete.

From a lan host can you traceroute towards 193.177.68.2
Also post the again these commands from those rtrs also and attach the output to a file in your OP

sh ip arp
sh ip route
sh run

 


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

I can communicate between PC on a LAN to the ISP via the ICMP protocol, i showed it replying to other person in this discussion (image sim.png). I attached the .rpa file to make it easier to analyze, if you can!