ipsec -o

Use the ipsec -o command to display the port translation table of the default stack. The -p option directs the command to another stack or the -z option directs the command to an NSS IPSec client. Port translation is done as needed for TCP and UDP connections that use a dynamic security association with a remote security endpoint that is behind a NAT.