R3721-F3210-F3171-HP High-End Firewalls NAT and ALG Command Reference-6PW101

13
[Sysname-acl-basic-2001] quit
[Sysname] nat address-group 1 202.110.10.10 202.110.10.12
# To also translate TCP/UDP port information, do the following:
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001 address-group 1
# To ignore the TCP/UDP port information in translation, do the following:
<Sysname> system-view
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001 address-group 1 no-pat
# To use the IP address of the GigabitEthernet 0/1 interface for translation, do the following:
<Sysname> system-view
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001
# To enable reverse address translation and use address pool 1, do the following:
<Sysname> system-view
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001 address-group 1 no-pat reversible
nat outbound static
Syntax
nat outbound static [ track vrrp virtual-router-id ]
undo nat outbound static [ track vrrp virtual-router-id ]
View
Interface view
Default level
2: System level
Parameters
track vrrp virtual-router-id: Associates static NAT with a VRRP group. The virtual-router-id argument
indicates the number of the VRRP group, in the range of 1 to 255. Without this option specified, no VRRP
group is associated.
Description
Use nat outbound static to enable static NAT on an interface, making the configured static NAT
mappings take effect.
Use undo nat outbound static to disable static NAT on the interface.
Related commands: display nat static.
Examples
# Configure a one-to-one NAT mapping and enable static NAT on interface GigabitEthernet 0/1.
<Sysname> system-view
[Sysname] nat static 192.168.1.1 2.2.2.2
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound static