FAQ-如何查看域间NAT策略对报文进行地址转换的次数

发布时间:  2014-09-19 浏览次数:  59 下载次数:  0
问题描述
如何查看域间NAT策略对报文进行地址转换的次数?
解决方案
使用display nat-policy interzone命令可以查看域间NAT策略对报文进行地址转换的次数。以Trust和Untrust域间Outbound方向的NAT策略为例,执行display nat-policy interzone trust untrust outbound命令后的显示信息如下:
<USG9000> display nat-policy interzone trust untrust outbound
nat-policy interzone trust untrust outbound                                     
The policy id number in this policy is:2 
policy 3 (5 times matched)                                                     
  action source-nat                                                              
  policy service service-set ip                                                  
  policy source 172.16.1.0 0.0.0.255                                             
  policy destination any                                                         
  address-group 1                                                                
                                                                                
policy 1 (1 times matched)                                                     
  action source-nat                                                              
  policy service service-set ip                                                  
  policy source 172.16.2.0 0.0.0.255                                             
  policy destination any                                                         
  address-group 2
上述信息中,X times matched表示该策略对报文进行地址转换的次数。

END