Logging NAT Translations

[swj38]

Hi All,

I've got a system that I'm just bedding in and someones just asked about logging NAT translations.

The setup I'm got is a 515e that then get's routed out a 3750 with the address translation being done on the Pix. Everything works as expected (at long last) the networks of seperate interfaces all get natted to different pools but I can't find out how to monitor the translations

I'm thinking that I may have to to up the logging level so it includes the NAT translations and work out a way to filter out the other stuff I don't won't but this seems like a kludge to me.

So put simply:

Does anyone know how to log NAT translations to a syslog server?


Cheers

Steve

 

[themut]

You need to send messages to a syslog server:

logging host <interface-name> <ip-syslog-server>
logging trap <level>
logging on


That's all the commands you need, <level> determines the messages you will be logging. Use the link below to determine the appropiate level:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/syslog/pixemapa.htm

 

[swj38]

Thanks for the reply and the link.

I had an inkling that this is what I'd have to do, I was just wondering if there was a specific way to turn on NAT logging like you can in IOS. Not too suprising if there isn't I couldn't find reference for it anywhere on the Cisco site.

Thanks again