NAT Pool Usage

[parkerbc]

Hi,

Is there a way to determine the usage levels of NAT pools over a time period. I believe we are running out of addresses in some of our pools and I would like to check what the usage levels are in of pools to see where I have flexibility for changes.

Thanks

[parkerbc · Accepted solution]

I opened a case regarding this question and the following was the result. Apparently there is not a way to automatically get this information.  The short term solution is to run the following command with which you can get the current NAT addresses from the pool in use and the free addresses available.

The CLI command is

show running nat-rule-ippool show-freelist yes rule RuleName

It seems like if this was information that was needed regular you should be able to setup some scripts to grab this regularly and log for monitoring.

[zarina]

You can view the pool usage through CLI:

admin@PA-200> show running ippool

Total active sessions: 0

Rule                             Used       Available

-------------------------------- ---------- ----------

SRc_NAT                          0          129024

[sdurga]

Yup the command is right and if you need this information regularly setting up a script should be an option,apart from this  I do not see any other way to do this .

[parkerbc]

It looks like the command below is only reporting available in the dynamic IP and port pool. It does not report individual ip nat pools and the addresses used in each of these pools.

admin@PA-4050> show running ippool

Total active sessions: 10708

Rule                             Used       Available

-------------------------------- ---------- ----------

rule22                           10559      505537