CGNAT Appliance Operational Commands

CGNAT Appliance Show Commands

The CGNAT operational commands provide detailed information about the address translation operations.

NAT Pool Information

This command displays information about IPv4 address pool for a user.

Syntax:

show address-translation allocation <options>

Option Description

pool

Specify the pool name.

user

Specify the user name.

Example for NAT pool allocation.

supervisor@rtbrick: op> show address-translation allocation pool
Pool: NAT_PUBLIC_POOL
  Instance: default
  Allocated: 4/4032 (0.10%)

NAT Rule Details

Syntax:

show address-translation rule <options>

Option Description

-

Without any option, the command displays the information for all rules.

instance

Displays NAT rule information for the specified instance.

summary

Displays summary of the information for the NAT rule.

user

Displays user information for the NAT rule.

Example for address translation rules for subscribers.

supervisor@rtbrick: op> show address-translation rule
Instance: default
User                             Protocol   Original Address        Translated Address      Direction
ifl-0/1/68/0                     tcp        198.51.100.101, 60001   203.0.113.1, 1088       Both
ifl-0/1/68/0                     tcp        198.51.100.102, 60001   203.0.113.2, 1024       Both
ifl-0/1/68/0                     tcp        198.51.100.103, 60001   203.0.113.1, 1025       Both
ifl-0/1/68/0                     tcp        198.51.100.104, 60001   203.0.113.1, 1057       Both
ifl-0/1/68/0                     tcp        198.51.100.105, 60001   203.0.113.2, 1057       Both
ifl-0/1/68/0                     tcp        198.51.100.101, 60002   203.0.113.1, 1089       Both
ifl-0/1/68/0                     tcp        198.51.100.102, 60002   203.0.113.2, 1025       Both
ifl-0/1/68/0                     tcp        198.51.100.103, 60002   203.0.113.1, 1024       Both
ifl-0/1/68/0                     tcp        198.51.100.104, 60002   203.0.113.1, 1056       Both
ifl-0/1/68/0                     tcp        198.51.100.105, 60002   203.0.113.2, 1056       Both
ifl-0/1/68/0                     udp        198.51.100.101, 60001   203.0.113.1, 1089       Both
ifl-0/1/68/0                     udp        198.51.100.102, 60001   203.0.113.2, 1025       Both
ifl-0/1/68/0                     udp        198.51.100.103, 60001   203.0.113.1, 1025       Both
ifl-0/1/68/0                     udp        198.51.100.104, 60001   203.0.113.1, 1056       Both
ifl-0/1/68/0                     udp        198.51.100.105, 60001   203.0.113.2, 1057       Both
ifl-0/1/68/0                     udp        198.51.100.101, 60002   203.0.113.1, 1088       Both
ifl-0/1/68/0                     udp        198.51.100.102, 60002   203.0.113.2, 1024       Both
ifl-0/1/68/0                     udp        198.51.100.103, 60002   203.0.113.1, 1024       Both
ifl-0/1/68/0                     udp        198.51.100.104, 60002   203.0.113.1, 1057       Both
ifl-0/1/68/0                     udp        198.51.100.105, 60002   203.0.113.2, 1056       Both

The example summary shows the total number of NAT rules for other protocol flows:

supervisor@rtbrick.net: cfg> show address-translation rule
Instance: vrf1
User                             Protocol   Original Address        Translated Address      Direction
ifl-0/1/6/100                    icmp       10.100.128.1, 7684      100.100.100.100, 1024   Both

NAT Trap Statistics

Syntax:

show address-translation trap statistics

This command displays the information of packets trapped in the NAT daemon.

Example for TCP flow stats

supervisor@rtbrick: op> show address-translation trap statistics
Protocol   Flags                     Status             Count
tcp        -|syn|-|-|-|-|-|-|-       Success               10
tcp        -|syn|-|-|-|-|-|-|-       Failure                4
udp        -|-|-|-|-|-|-|-|-         Success               10
udp        -|-|-|-|-|-|-|-|-         Failure              204
udp_ctrl   -|-|-|-|-|-|-|-|-         Failure               41
Total Successful Traps:                                    20
Total Failed Traps:                                       249

Example for TCP, UDP, ICMP(other) flow stats

supervisor@rtbrick: cfg> show address-translation trap statistics
Protocol   Flags                     Status             Count
tcp        -|syn|-|-|-|-|-|-|-       Success               60
tcp        fin|-|-|-|ack|-|-|-|-     Success                4
tcp        -|syn|-|-|ack|-|-|-|-     Failure               12
udp        -|-|-|-|-|-|-|-|-         Success              182
udp        -|-|-|-|-|-|-|-|-         Failure              326
other      -|-|-|-|-|-|-|-|-         Success             5292
Total Successful Traps:                                  5538
Total Failed Traps:                                       338

NAT Error Details

This command displays NAT error information.

Syntax:

show address-translation error

Example for address translation error:

supervisor@rtbrick: op> show address-translation error
TRAP_HNDL - Nat Profile Not Present
    Counter        : 243
    Current Update : Fri Jun 05 17:15:15 GMT +0000 2026
    Last Update    : Fri Jun 05 17:15:15 GMT +0000 2026
TRAP_HNDL - Fib-Local Route
    Counter        : 50
    Current Update : Fri Jun 05 17:15:10 GMT +0000 2026
    Last Update    : Fri Jun 05 17:15:10 GMT +0000 2026
TRAP_HNDL - Source route requested
    Counter        : 50
    Current Update : Fri Jun 05 17:15:10 GMT +0000 2026
    Last Update    : Fri Jun 05 17:15:10 GMT +0000 2026

Clear NAT Errors

Syntax:

clear address-translation error

This command resets the existing statistics for NAT errors.