In this article we will see how to identify blocked NAT port range for a specific host

If you suspect any blocked port range causing issues in NAT use below command to check blocked ports

Command : show services nat source port-block host-ip <source-ip>

Example:

user@router> show services nat source port-block host-ip 10.10.10.1 | refresh 1   

Interface: mams-8/0/0

Pool name: NAT44POOL

Port-overloading-factor:   1   Port block size:  64

Max port blocks per host: 100   Port block active timeout:  0

Used/total port blocks per host: 1/100

Host_IP            External_IP          Port_Block     Ports_Used/    Block_State/

                                Range       Ports_Total    Left_Time(s)

10.10.10.1       XX.XXX.XX.XXX         43392-43455       2/64*1      Active/-