R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

130
Enabling aging out NAT entries upon master link
failure
In a link backup environment where NAT is enabled on the master and backup interfaces of a gateway
device, if the master link fails, the backup link switches to the master state. If this feature is enabled on the
gateway, all existing NAT entries on the failed link are aged out immediately, so that new NAT entries
can be created for subsequent packets on the new master link, and thus existing NAT streams can be
directed to the new link immediately.
To enable aging out NAT entries upon master link failure:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable aging out NAT entries
upon master link failure.
nat link-down reset-session
enable
Disabled by default.
Displaying and maintaining NAT
IMPORTANT:
Clearing the NAT log buffer implies loss of all NAT logs. In general, HP recommends not using this
command.
Task Command Remarks
Display information about NAT
address pools.
display nat address-group
[ group-number ] [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display the NAT aging time settings
for various protocols.
display nat aging-time [ | { begin |
exclude | include } regular-expression ]
Available in any view.
Display all NAT configuration
information.
display nat all [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display NAT configuration
information.
display nat bound [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display DNS mapping configuration
information.
display nat dns-map [ | { begin | exclude
| include } regular-expression ]
Available in any view.
Display the internal server
information.
display nat server [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display static NAT information.
display nat static [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display dynamic NAT entries.
display nat session [ vpn-instance
vpn-instance-name ] [ source { global
global-address | inside inside-address } ]
[ destination dst-address ] [ | { begin |
exclude | include } regular-expression ]
Available in any view.