[Contents] [Prev] [Next] [Index] [Report an Error]

Verifying NAT Configuration on SRX–series Services Gateways

The NAT trace options hierarchy configures trace file and flags for verification purposes. SRX-series devices have two main components. Those are the Routing Engine (RE) and the Packet Processing Engine (PFE). The PFE is divided into the ukernel portion and the real-time portion. For verification, you can turn on flags individually to debug NAT functionality on the RE, ukernel PFE, or real-time PFE.

Note: The trace data is written to/var/log/security-trace by default.

CLI Configuration



user@host# set security nat traceoptions
flag all

user@host# set security nat traceoptions
flag destination-nat-pfe

user@host# set security nat traceoptions
flagdestination-nat-re

user@host# set security nat traceoptions
flag destination-nat-rti

user@host# set security nat traceoptions
flag destination-nat-pfe

user@host# set security nat traceoptions flag
source-nat-pfe

user@host# set security nat traceoptions flag
source-nat-re

user@host# set security nat traceoptions flag
source-nat-rt

user@host# set security nat traceoptions
flag static-nat-pfe

user@host# set security nat traceoptions
flag static-nat-re

user@host# set security nat traceoptions
flag static-nat-rt

[Contents] [Prev] [Next] [Index] [Report an Error]