After NAT is configured, you can check the configuration result and view or clear NAT statistics.
Operation |
Command |
|---|---|
Rename a NAT rule. |
rule rename old-name new-name |
Change the positions of NAT rules. |
rule move rule-name1 { { after | before } rule-name2 | up | down | top | bottom } |
Clone a NAT rule. |
rule copy rule-name new-rule-name |
Enable or disable the current NAT rule. |
Table 2 lists the operations for checking NAT configurations.
Operation |
Command |
|---|---|
Check existing NAT address pools. |
display nat address-group [name group-name | id group-id | all-systems | vsys vsysname ] |
Check NAT policy rule configurations. |
display nat-policy rule { all [ slot slot-id cpu cpu-id ] | name rule-name } display nat-policy rule [ verbose ] { source-zone { source-zone-name | any } | destination-zone { destination-zone-name | any } | { source { source-ip-address | any } | destination { destination-ip-address | any } } | protocol { { tcp | udp | sctp } [source-port source-port | destination-port destination-port ]* | icmp | protocol-number | any } }* |
View the NAT Server configuration. |
display nat server [ all-systems | vsys vsysname ] display nat server { id nat-server-id | name nat-server-name | global-ip global-ip | inside-ip inside-ip } [ vsys vsysname ] display nat server mib [ mib-index ] |
View the configuration of Destination NAT address pools. |
display destination-nat address-group [ [ id address-group-number | name address-group-name ] [ vsys vsysname ] | all-systems ] |