Displaying IP pool usage
Use the diagnose firewall ippool list
command to show general IP pool usage for CGNAT IP pools.
Command syntax:
diagnose firewall ippool list [{pba | nat-ip | user}]
List details for all IP pools:
diagnose firewall ippool list list ippool info:(vf=cgn-hw1) ippool test-cgn-pba-1: id=1, block-sz=64, num-block=8, fixed-port=no, use=4 ip-range=172.16.201.181-172.16.201.182 start-port=5117, num-pba-per-ip=944 clients=1, inuse-NAT-IPs=1 total-PBAs=1888, inuse-PBAs=1, expiring-PBAs=0, free-PBAs=99.95% allocate-PBA-times=1, reuse-PBA-times=0 grp=N/A, start-port=8117, end-port=8629 npu-clients=1, npu-inuse-NAT-IPs=1, total-NAT-IP=2 npu-total-PBAs=16, npu-inuse-PBAs=4/0, npu-free-PBAs=75.00%/100.00% npu-tcp-sess-count=256, npu-udp-sess-count=0 ippool test-cgn-opba-1: id=2, block-sz=256, num-block=8, fixed-port=no, use=2 ip-range=172.16.201.183-172.16.201.184 start-port=5117, num-pba-per-ip=236 clients=0, inuse-NAT-IPs=0 total-PBAs=472, inuse-PBAs=0, expiring-PBAs=0, free-PBAs=100.00% allocate-PBA-times=0, reuse-PBA-times=0 ippool test-cgn-spba-1: id=3, block-sz=128, num-block=8, fixed-port=no, use=2 ip-range=172.16.201.185-172.16.201.186 start-port=5117, num-pba-per-ip=472 clients=0, inuse-NAT-IPs=0 total-PBAs=944, inuse-PBAs=0, expiring-PBAs=0, free-PBAs=100.00% allocate-PBA-times=0, reuse-PBA-times=0 ...
List PBAs in IP pools:
diag firewall ippool list pba user 10.1.100.200: 172.16.201.181 8117-8180, idx=0, use=1 user 10.1.100.200: 172.16.201.181 8181-8244, idx=1, use=1 user 10.1.100.200: 172.16.201.181 8245-8308, idx=2, use=1 user 10.1.100.200: 172.16.201.181 8309-8372, idx=3, use=1 Total pba in NP: 4
List allocated IP addresses in IP pools:
diag firewall ippool list nat-ip NAT-IP 172.16.201.181: pba=8, use=4 Total nat-ip in NP: 1
List users of IP pools:
diag firewall ippool list user User-IP 10.1.100.200: pba=4, use=1 Total user in NP: 1