Fortinet black logo

Hyperscale Firewall Guide

CGNAT usage information

CGNAT usage information

Use the following commands to display the CGN client IP addresses, PBA blocks, and public IP addresses currently in use.

diagnose firewall ippool {list {pba | nat-ip | user} | stats}

diagnose firewall ippool {list {pba | nat-ip | user} | stats | get-priv | get-pub | get-pub6}

diagnose firewall ippool get-priv <public-ipv4> [<public-port>]

diagnose firewall ippool get-pub <private-ipv4>

diagnose firewall ippool get-pub6 <private-ipv6>

stats list the total number of CGNAT IP pools that have been allocated, the number of currently active client IP addresses, NAT IP addresses, and PBA blocks.

pba list currently active source addresses of CGNAT clients and the PBA blocks assigned to them.

user list currently active source addresses of CGNAT clients and the number of PBA blocks assigned to them.

nat-ip list currently active public IP addresses and the number of PBA blocks and user sessions connected to each public IP.

get-priv <public-ipv4> [<public-port>] query private information of a public IPv4 address and optionally a port number.

get-pub <private-ipv4> query public information of a private IPv4 address.

get-pub6 <private-ipv6> query public information of a private IPv6 address.

CGNAT usage information

Use the following commands to display the CGN client IP addresses, PBA blocks, and public IP addresses currently in use.

diagnose firewall ippool {list {pba | nat-ip | user} | stats}

diagnose firewall ippool {list {pba | nat-ip | user} | stats | get-priv | get-pub | get-pub6}

diagnose firewall ippool get-priv <public-ipv4> [<public-port>]

diagnose firewall ippool get-pub <private-ipv4>

diagnose firewall ippool get-pub6 <private-ipv6>

stats list the total number of CGNAT IP pools that have been allocated, the number of currently active client IP addresses, NAT IP addresses, and PBA blocks.

pba list currently active source addresses of CGNAT clients and the PBA blocks assigned to them.

user list currently active source addresses of CGNAT clients and the number of PBA blocks assigned to them.

nat-ip list currently active public IP addresses and the number of PBA blocks and user sessions connected to each public IP.

get-priv <public-ipv4> [<public-port>] query private information of a public IPv4 address and optionally a port number.

get-pub <private-ipv4> query public information of a private IPv4 address.

get-pub6 <private-ipv6> query public information of a private IPv6 address.