F3215-HP Load Balancing Module Network Management Command Reference-6PW101
116
vpn-instance local-name: Specifies the VPN to which the advertised internal network address belongs.
The local-name argument is a case-sensitive string of 1 to 31 characters. Without this option, the
advertised internal IP address does not belong to any VPN.
Examples
# Create an ACL. Allow packets with destination address 202.110.10.100/24 (public address of the
internal server) to pass.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit ip destination 202.110.10.100 0.0.0.255
[Sysname-acl-adv-3000] quit
# Allow packets permitted by the ACL to access the internal Web server 192.168.0.1 in the private
network. Assume that the interface GigabitEthernet 0/1 is connected to the external network.
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] nat server protocol tcp global 3000 inside 192.168.0.1 www
Related commands
display nat server
nat static
Use nat static to configure a one-to-one static NAT mapping.
Use undo nat static to remove a one-to-one static NAT mapping.
Syntax
nat static [ acl-number ] local-ip [ vpn-instance local-name ] global-ip [ vpn-instance global-name ]
undo nat static [ acl-number ] local-ip [ vpn-instance local-name ] global-ip [ vpn-instance global-name ]
Views
System view
Default command level
2: System level
Parameters
acl-number: ACL number in the range of 2000 to 3999. You can use an ACL to control the access traffic
between internal and external hosts. Only hosts permitted by an ACL can be performed static NAT.
local-ip: Internal IP address.
vpn-instance local-name: Specifies the VPN to which the internal IP address belongs. The local-name
argument is a case-sensitive string of 1 to 31 characters. Without this option, the internal IP address does
not belong to any VPN.
global-ip: External IP address.
vpn-instance global-name: Specifies the VPN to which the external IP address belongs. The global-name
argument is a case-sensitive string of 1 to 31 characters. Without this option, the external IP address does
not belong to any VPN.
Examples
# Configure static NAT mapping between internal IP address 192.168.1.1 and external IP address
2.2.2.2.