R3721-F3210-F3171-HP High-End Firewalls NAT and ALG Command Reference-6PW101

17
nat static
Syntax
nat static [ acl-number ] local-ip [ vpn-instance local-name ] global-ip [ vpn-instance global-name ]
undo nat static [ acl-number ] local-ip [ vpn-instance local-name ] global-ip [ vpn-instance global-name ]
View
System view
Default level
2: System level
Parameters
acl-number: Specifies an ACL by its number, in the range of 2000 to 3999. With this argument specified,
the device can control the destination IP address that the internal hosts can visit.
local-ip: Internal IP address.
vpn-instance local-name: Specifies the VPN to which the internal IP address belongs. The local-name
argument is a case-sensitive string of 1 to 31 characters. Without this option, the internal IP address does
not belong to any VPN.
global-ip: External IP address.
vpn-instance global-name: Specifies the VPN to which the external IP address belongs. The global-name
argument is a case-sensitive string of 1 to 31 characters. Without this option, the external IP address does
not belong to any VPN.
Description
Use nat static to configure a one-to-one static NAT mapping.
Use undo nat static to remove a one-to-one static NAT mapping.
Related commands: display nat static.
Examples
# In system view, configure static NAT mapping between internal IP address 192.168.1.1 and external IP
address 2.2.2.2.
<Sysname> system-view
[Sysname] nat static 192.168.1.1 2.2.2.2
nat static net-to-net
Syntax
nat static [ acl-number ] net-to-net local-network [ vpn-instance local-name ] global-network
[ vpn-instance global-name ] { mask-length | mask }
undo nat static [ acl-number ] net-to-net local-network [ vpn-instance local-name ] global-network
[ vpn-instance global-name ] { mask-length | mask }
View
System view
Default level
2: System level