Cisco ASA NAT – ‘sh run global’ and ‘sh run nat’ Yield No Output

ciscocisco-asanat;vpn

As the topic says, I'm investigating NAT on a clients ASA – it's running old 7.2 train code – I execute 'sh run global' and 'sh run nat' – the latter command only returns a single nat 0 line.

When I do a 'sh run | b static' (which I thought would've shown up under one of the previous two commands!) I get a long list of policy based nat in the format of 'static (outside,inside) x.x.x.x access-list ' Which is what I would expect to have seen from one of those previously attempted commands.

What commands need to be run to see everything involving nat on a 7.2 ASA? I am not seeing any kind of DST nat (which I expect in this particular case) for the tunnel I'm looking at, but yet the tunnel is up and passing traffic, so it's happening somewhere!

Thank you in advance!

Best Answer

show global
show nat
show static
show conduit (unless you've switched to ACLs)

Of course, that's going to be 90% of the entire configuration anyway. (more if pdm isn't enabled, thus flooding the config with pdm location ...)

Related Topic