The output of the show ip nat translations command shown in Figure 1 displays the details of the two previous NAT assignments. The command displays all static translations that have been configured and any dynamic translations that have been created by traffic.

Adding the verbose keyword displays additional information about each translation, including how long ago the entry was created and used.

By default, translation entries time out after 24 hours, unless the timers have been reconfigured with the ip nat translation timeout timeout-seconds command in global configuration mode.

To clear dynamic entries before the timeout has expired, use the clear ip nat translation global configuration mode command (Figure 2). It is useful to clear the dynamic entries when testing the NAT configuration. As shown in the table, this command can be used with keywords and variables to control which entries are cleared. Specific entries can be cleared to avoid disrupting active sessions. Use the clear ip nat translation * global configuration command to clear all translations from the table.

Note:Only the dynamic translations are cleared from the table. Static translations cannot be cleared from the translation table.

In Figure 3, the show ip nat statistics command displays information about the total number of active translations, NAT configuration parameters, the number of addresses in the pool, and how many of the addresses have been allocated.

Alternatively, use the show running-config command and look for NAT, ACL, interface, or pool commands with the required values. Examine these carefully and correct any errors discovered.