Verify the NAT configured in Configuring Basic Source Static NAT.
Take the following actions:
Note: You are configuring loopback addresses in this example for verification purposes only. If you have the network set up and the source address 10.0.1.2 is configured on a host, ping an external router from the host. In this case, you do not need to configure the loopback address.
user@r1> ping 18.104.22.168 source 10.0.1.2
PING 22.214.171.124 (126.96.36.199): 56 data bytes 64 bytes from 188.8.131.52: icmp_seq=0 ttl=64 time=6.669 ms 64 bytes from 184.108.40.206: icmp_seq=1 ttl=64 time=40.441 ms ...
user@r1> show services stateful-firewall conversations extensive
Interface: sp-0/0/0, Service set: nat-service-set Conversation: ALG protocol: icmp Number of initiators: 1, Number of responders: 1 Flow State Dir Frm count ICMP 10.0.1.2:52499 -> 220.127.116.11 Watch O 2 NAT source 10.0.1.2:52499 -> 18.104.22.168:52499 Byte count: 84 Flow role: Master, Timeout: 30, Protocol detail: echo request ICMP 22.214.171.124:52499 -> 126.96.36.199 Watch I 2 NAT dest 188.8.131.52:52499 -> 10.0.1.2:0 Byte count: 84 Flow role: Responder, Timeout: 30, Protocol detail: echo reply
Verify the following information:
Alternatively, you can use the show services stateful-firewall flows command to display the NAT flows. The show services stateful-firewall conversations command is easier to use for verification because it displays corresponding NAT flows together instead of a random listing of all flows.
For detailed descriptions of the show services stateful-firewall conversations and show services stateful firewall flows commands and output, see the JUNOS System Basics and Services Command Reference.
For information about using the J-Web interface to ping a host, see the J-series Services Router Administration Guide.