R3303-HP 6600/HSR6600 Routers Layer 3 - IP Services Command Reference

133
Syntax
nat server protocol pro-type global { global-address | current-interface | interface interface-type
interface-number } global-port1 global-port2 [ vpn-instance global-name ] inside local-address1
local-address2 local-port [ vpn-instance local-name ] [ track vrrp virtual-router-id ]
undo nat server protocol pro-type global { global-address | current-interface | interface interface-type
interface-number } global-port1 global-port2 [ vpn-instance global-name ] inside local-address1
local-address2 local-port [ vpn-instance local-name ] [ track vrrp virtual-router-id ]
nat server protocol pro-type global { global-address | current-interface | interface interface-type
interface-number } [ global-port ] [ vpn-instance global-name ] inside local-address [ local-port ]
[ vpn
-instance local-name ] [ track vrrp virtual-router-id ]
undo nat server protocol pro-type global { global-address | current-interface | interface interface-type
interface-number } [ global-port ] [ vpn-instance global-name ] inside local-address [ local-port ]
[ vpn-instance local-name ] [ track vrrp virtual-router-id ]
Views
Interface view
Default command level
2: System level
Parameters
protocol pro-type: Specifies a protocol type. pro-type supports TCP, UDP, and ICMP. If ICMP is specified,
do not specify port number for the internal server.
global-address: Specifies the public IP address for the internal server.
current-interface: Uses the current interface address as the external IP address for the internal server.
interface: Uses a specific interface address as the external IP address for the internal server, enabling
Easy IP.
interface-type interface-number: Specifies the interface type and interface number. Only loopback
interface is supported and must be configured. Otherwise the configuration is considered illegal.
global-port1, global-port2: Specifies a range of ports that have a one-to-one correspondence with the IP
addresses of the internal hosts. The global-port2 argument must be greater than global-port1.
local-address1, local-address2: Defines a consecutive range of addresses that have a one-to-one
correspondence with the range of ports. The local-address2 argument must be greater than
local-address1 and that the number of addresses must match that of the specified ports.
local-port: Specifies the port number provided by the internal server, in the range of 0 to 65535,
excluding FTP port number 20.
• You can use the service names to represent those well-known port numbers. For example, you can
use www to represent port number 80, ftp to represent port number 21, and so on.
• You can use the keyword any to represent port number 0, which means all types of services are
supported. This has the same effect as a static translation between the global-address and
local-address.
global-port: Specifies the global port number for the internal server, in the range of 0 to 65535.
local-address: Specifies the internal IP address of the internal server.