Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide Chapter 11 NAT Configuration Commands
3Com Corporation
11-7
11.1.7 nat outbound
Syntax
nat outbound acl-number [ address-group group-number [ no-pat ] ]
undo nat outbound acl-number [ address-group group-number [ no-pat ] ]
View
Interface view
Parameter
address-group: Configures address translation by means of address pool. If the
address pool is not specified, use the IP address of the interface as the translated
address, that is, the "easy ip" feature.
no-pat: Uses simple address translation, which means only to translate the address of
the packet but not use port information.
acl-number: ACL index in the range of 2000 to 3999 (the advanced ACL can be used).
group-number: The number of a defined address pool.
Description
Use the nat outbound command to associate an ACL with an address pool, indicating
that the address specified in the acl-number can be translated by using address pool
group-number.
Use the undo nat outbound command to remove the corresponding address
translation.
Translation of the source address of the packet that conforms to the ACL is
accomplished by configuring the association between the ACL and the address pool.
The system performs address translation by selecting one address in the address pool
or by directly using the IP address of the interface. Users can configure different
address translation associations at the same interface. The corresponding undo form
of the command can be used to delete the related address translation association.
Normally, this interface is connected to ISP, and serves as the exit interface of the
inside network.
The command without the address-group parameter implements the "easy-ip" feature.
When performing address translation, the IP address of the interface is used as the
translated address and the ACL can be used to control which addresses can be
translated.
Suppose that you directly take the interface address as the public network address
after NAT, if you change the interface address in order to visit the external network, you
must use the reset nat session command to clear the original NAT address mapping