How to check NAT IP over-utilized or not?

[Ankit1Singh]

Hi Mates,

We have particular Source NAT based on IP address and want to understand if there is any way to check the current utilization of IP's for NAT. This might help to add more IPs to prevent from overutilized.

Thanks in advance.

Ankit

[ThePromisedLAN]

If you mean the port utilization used for your source NAT IPs you can check with 

show running ippool

while Used shows the current allocation of each of your NAT policies, Available shows what's available in total. The Available value is higher depending on oversubscription-rate, which is the Ratio value shown, which differs between firewall models.

Docs: Dynamic IP and Port NAT Oversubscription

[Ankit1Singh]

Thanks for your reply, But I am confused with below 2 output. How can I understand whether we have enough space for the natting.

(active)> show running nat-rule-ippool show-freelist yes rule XXX

VSYS 2 Rule yes:

Rule: XXX, Pool index: 114, memory usage: 36472

-----------------------------------------

Oversubscription Ratio:                4

Number of Allocates:             1033739

Last Allocated Index:              11824

-----------------------------------------

------------ Private Pool ---------------

Number of Allocates:                   0

Last Allocated Index:                  0

(active)> show running ippool | match XXX

XXX                   Dynamic IP/Port 51621      206427        36472     4

Please help to understand.