R3204P16-HP Load Balancing Module Network Management Command Reference-6PW101

90
interface-type interface-number: Specifies the interface type and interface number. Only loopback
interface is supported and must be configured; otherwise the configuration is considered illegal.
current-interface: Uses the current interface address as the public IP address for the internal server.
global-port1, global-port2: Specifies a range of ports that have a one-to-one correspondence with the IP
addresses of the internal hosts. global-port2 must be greater than global-port1.
local-address1, local-address2: Defines a consecutive range of addresses that have a one-to-one
correspondence with the range of ports. local-address2 must be greater than local-address1 and that the
number of addresses must match that of the specified ports.
local-port: Port number provided by the internal server, in the range 0 to 65535, excluding FTP port
number 20.
• You can use the service names to represent those well-known port numbers. For example, you can
use www to represent port number 80, ftp to represent port number 21, and so on.
• You can use the keyword any to represent port number 0, which means all types of services are
supported. This has the same effect as a static translation between the global-address and
local-address.
track vrrp virtual-router-id: Associates the internal server with a VRRP group. The virtual-router-id
argument indicates the number of the VRRP group to be associated. Without this argument specified, no
VRRP group is associated.
Description
Use the nat server command to define an internal server.
Using the address and port defined by the global-address and global-port parameters, external users
can access the internal server with an IP address of local-address and a port of local-port.
Use the undo nat server command to remove the configuration.
Note the following:
• Using this command, you can configure internal servers (such as Web, FTP, Telnet, POP3, and DNS
servers) to provide services for external users. An internal server can reside in a private network.
• The number of internal servers that each command can define equals the difference between
global-port2 and global-port1. Up to 4096 internal servers can be configured on an interface. The
system allows up to 1024 internal server configuration commands.
• In general, this command is configured on an interface that serves as the egress of an internal
network and connects to the external networks.
• The LB module supports using an interface address as the public IP address of an internal server,
that is, Easy IP. If you specify the current-interface keyword, the internal server uses the current
primary IP address of the current interface. If you use interface { interface-type interface-number } to
specify an interface, the interface must be an existing loopback interface and the current primary
IP address of the loopback interface is used.
• It is strongly recommended that if an internal server using Easy IP is configured on the current
interface, the IP address of this interface should not be configured as the public address of another
internal server; vice versa. This is because that the interface address that is referenced by the
internal server using Easy IP serves as the public address of the internal server.
• In stateful failover networking, make sure that you associate the public address of an internal server
on an interface with one VRRP group only; otherwise, the system associates the public address with
the VRRP group having the highest group ID.
Related commands: display nat server.