R3303-HP HSR6800 Routers Layer 3 - IP Services Command Reference

133
Default command level
2: System level
Parameters
protocol pro-type: Specifies a protocol type, TCP or UDP.
global-address: Specifies the public IP address for the internal server.
current-interface: Uses the current interface's address as the public IP address of the internal server.
interface interface-type interface-number: Uses the specified interface's address as the external IP
address of the internal server, the Easy IP feature. The interface is specified by its type and number. Only
loopback interfaces are supported and the specified loopback interface must exist. Otherwise, the
configuration is invalid.
global-port: Specifies the public port number for the internal server, in the range of 0 to 65535.
• You can use service names to represent well-known port numbers. For example, you can use www
to represent port number 80, ftp to represent port number 21, and so on.
• You can use the keyword any to represent port number 0, which means all types of services are
supported. This has the same effect as a static translation between the global-address and
host-address.
vpn-instance global-name: Specifies the MPLS L3VPN to which the advertised external IP address
belongs. The global-name argument is a case-sensitive string of 1 to 31 characters. Without this option,
the advertised external IP address does not belong to any VPN.
inside server-group group-number: Internal server group to which the internal server belongs. The
group-number argument specifies the internal server group number in the range of 0 to 31.
vpn-instance local-name: Specifies the MPLS L3VPN to which the internal server belongs. The local-name
argument is a case-sensitive string of 1 to 31 characters. Without this option, the internal server does not
belong to any VPN.
Usage guidelines
Using this command, you can configure internal servers (such as Web, FTP, Telnet, POP3, and DNS
servers) to provide services for external users.
An internal server can reside in an internal network or an MPLS VPN. This command supports inter-VPN
access through NAT.
The number of load sharing internal servers supported on an interface and the number of internal servers
supported by the system depends on the device model.
In general, this command is configured on an interface that serves as the egress of an internal network
and connects to the ISP.
Examples
# Allow external users to access the internal Web server 10.110.10.10 on the LAN through
http://202.110.10.10:8080. Assume that interface Serial 2/1/0 is connected to the external network.
<Sysname> system-view
[Sysname] nat server-group 1
[Sysname-nat-server-group-1] inside ip 10.110.10.10 port 30
[Sysname-nat-server-group-1] quit
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] nat server protocol tcp global 202.110.10.10 8080 vpn vrf10 inside
server-group 1