ASA # show xlate | show conn | show local-host

最新推荐文章于 2023-05-06 18:45:44 发布

net527

最新推荐文章于 2023-05-06 18:45:44 发布

阅读量2.3k

点赞数

文章标签： ubuntu tcp 网络 linux 思科 vmware

本文链接：https://blog.csdn.net/net527/article/details/5914049

版权

拓扑： R1 (outsdie).1------202.100.1.x---------.10---ASA---.10---------10.1.1.X----.1--R2(inside)

-----.2---xp(inside)

从R2上打开两个telnet窗口，从XP上ping包到202.100.1.1 。ASA上做nat, ---> 202.100.1.10(外接口的IP)
---------------------------
ASA(config)# show conn
2 in use, 10 most used
TCP out 202.100.1.1:23 in 10.1.1.1:11209 idle 0:14:51 bytes 178 flags UIO
TCP out 202.100.1.1:23 in 10.1.1.1:60323 idle 0:14:56 bytes 234 flags UIO
---------------------------
ASA(config)# show xlate
3 in use, 10 most used
PAT Global 202.100.1.10(1027) Local 10.1.1.1(11209)
PAT Global 202.100.1.10(1026) Local 10.1.1.1(60323)
PAT Global 202.100.1.10(1) Local 10.1.1.2 ICMP id 512
---------------------------
ASA(config)# show local-host | include host|count/limit
local host: <10.1.1.1>,
    TCP flow count/limit = 2 /unlimited
    TCP embryonic count to host = 0
    UDP flow count/limit = 0/unlimited
local host: <10.1.1.2>,
    TCP flow count/limit = 0/unlimited
    TCP embryonic count to host = 0
    UDP flow count/limit = 0/unlimited
local host: <202.100.1.1>,
    TCP flow count/limit = 2/unlimited
    TCP embryonic count to host = 0
    UDP flow count/limit = 0/unlimited