H3C MSR 20-20, Command Reference Manual

Page: 2036 / 2742

2036 C
HAPTER
133: NAT C
ONFIGURATION
C
OMMANDS
nat server [ vpn-instance vpn-instance-name ] protocol pro-type global
{ global-address | interface { interface-type interface-number } | current-interface }
[ global-port ] inside host-address [ host-port ]
undo nat server [ vpn-instance vpn-instance-name ] protocol pro-type global
{ global-address | interface { interface-type interface-number } | current-interface }
global-port1 global-port2 inside host-address1 host-address2 host-port
undo nat server [ vpn-instance vpn-instance-name ] protocol pro-type global
{ global-address | interface { interface-type interface-number } | current-interface }
[ global-port ] inside host-address [ host-port ]
View Interface view
Parameter vpn-instance-name : Instance name of a VPN to which an internal server belongs,
in the range 1 to 31 characters. Absence of this parameter indicates that the
internal server belongs to a normal private network instead of an MPLS VPN
instance.
pro-type : Type of protocols over IP. It could be provided either in protocol number
or key word, such as icmp (or its protocol number 1), tcp (or 6), udp (or 17). The
value ranges from 1 to 255.
global-address : A valid IP address designated for external access.
interface : Uses a specified interface address as the public IP address of an internal
server. This only applies to Easy IP.
interface-type interface-number : Specifies the interface type and interface
number. Currently, this interface must be an existing Loopback interface.
current-interface : Uses the current interface address as the public IP address of
an internal server.
global-port1, global-port2 : Jointly specifies a port range that corresponds to the IP
address range of internal hosts. Note that global-port2 must be greater than
global-port1 .
host-address1, host-address2 : Jointly defines a sequence of addresses that
corresponds to the port range. Note that host-address2 must be greater than
host-address1 and that the range and number of the addresses must match those
of the ports.
host-port : Port number provided by the NAT server, in the range 0 to 65,535. The
default value is 0, suggesting a static connection between the global-address and
host-address.
■
You can use the service names (or keywords) to represent those well-known
port numbers, for example, you can use
www to represent port number 80,
ftp to represent port number 21, and so on.
■
In particular, you can use the keyword any to represent port number 0, which
means all types of services are supported.
■
The support for a default port number varies by device models.