HP MSR2000/3000/4000 Router Series Layer 3 - IP Services Command Reference

153
# Apply the Endpoint-Independent Mapping to FTP and HTTP packets, and the Address and
Port-Dependent Mapping to other packets for address translation.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule permit tcp destination-port eq 80
[Sysname-acl-adv-3000] rule permit tcp destination-port eq 21
[Sysname-acl-adv-3000] quit
[Sysname] nat mapping-behavior endpoint-independent acl 3000
Related commands
• nat outbound
• display nat eim
nat outbound
Use nat outbound to configure outbound dynamic NAT on an interface.
Use undo nat outbound to disable outbound dynamic NAT.
Syntax
NO-PAT:
nat outbound [ acl-number ] address-group group-number [ vpn-instance vpn-instance-name ] no-pat
[ reversible ]
undo nat outbound [ acl-number ]
PAT:
nat outbound [ acl-number ] [ address-group group-number ] [ vpn-instance vpn-instance-name ]
[ port-preserved ]
undo nat outbound [ acl-number ]
Default
No outbound dynamic NAT rule is configured.
Views
Interface view
Predefined user roles
network-admin
Parameters
acl-number: Specifies an ACL number in the range of 2000 to 3999. If you do not specify any ACL, NAT
translates all packets.
address-group group-number: Specifies an address group for NAT. The value range for the
group-number argument is 0 to 65535. If you do not specify any address group, the IP address of the
interface is used as the NAT address. Easy IP is used.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the addresses of the
address group belong. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
To specify addresses in the public network, do not use this option.