R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

129
Step Command Remarks
2. Export NAT logs to the information
center.
userlog nat syslog
NAT logs are exported to the NAT
log server by default.
Exporting NAT logs to the log server
For the device to export NAT logs to the log server in UDP packets, you can configure three parameters:
IP address and UDP port number of the NAT log server. NAT logs cannot be exported successfully
if you do not configure the information center export direction and specify the log server address.
Source IP address of NAT logs. This address allows the log server to identify the log source. Use the
loopback interface address as the source IP address of NAT logs.
Version number of NAT logs. NAT logs might come in several versions, each with a different packet
format. The device supports only version 1.
On a distributed device–Centralized IRF device–In standalone mode, you can specify a separate log
server for each interface card identified by slot slot-number to implement load sharing on log servers.
On a distributed device–In IRF mode, you can specify a separate log server for each interface card
identified by chassis chassis-number to implement load sharing on log servers.
To configure the device to export NAT logs to a NAT log server:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Specify the IP address
and UDP port number
of the NAT log server.
userlog nat export host { ipv4-address |
ipv6 ipv6-address } udp-port
The IP address of the NAT log server
must be a valid IPv4 or IPv6 unicast
address.
Use a port number greater than 1024
to avoid conflicting with the
system-defined port numbers.
3. Specify the source IP
address for the UDP
packets that carry NAT
logs.
userlog nat export source-ip ip-address
Optional.
By default, the source IP address is
the IP address of the interface through
which the UDP packets are sent.
4. Specify the version
number of the NAT log
packets.
userlog nat export version
version-number
Optional.
Version 1 by default.
Setting NAT connection limits
For more information about NAT connection limits, see Security Configuration Guide.