Manualshelf

R0106-HP MSR Router Series Layer 3 - IP Services Command Reference(V7)

ManualsBrandsHP ManualsNetwork HardwareHP MSR3024 TAA-compliant AC Router
171172173174175176177178179180
168
nat outbound
Use nat outbound to configure outbound dynamic NAT on an interface.
Use undo nat outbound to disable outbound dynamic NAT.
Syntax
NO-PAT:
nat outbound [ acl-number ] address-group group-number [ vpn-instance vpn-instance-name ] no-pat
[ reversible ]
undo nat outbound [ acl-number ]
PAT:
nat outbound [ acl-number ] [ address-group group-number ] [ vpn-instance vpn-instance-name ]
[ port-preserved ]
undo nat outbound [ acl-number ]
Default
No outbound dynamic NAT rule is configured.
Views
Interface view
Predefined user roles
network-admin
Parameters
acl-number: Specifies an ACL number in the range of 2000 to 3999. If you do not specify any ACL, NAT
translates all packets.
address-group group-number: Specifies an address group for NAT. The value range for the
group-number argument is 0 to 65535. If you do not specify any address group, the IP address of the
interface is used as the NAT address. Easy IP is used.
vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the addresses of the
address group belong. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters.
To specify addresses in the public network, do not use this option.
no-pat: Uses NO-PAT for outbound NAT. If you do not specify this keyword, PAT is used. PAT only
supports TCP, UDP, and ICMP query packets. For an ICMP packet, the ICMP ID is used as its source port
number.
reversible: Allows reverse address translation. NAT translates the destination IP address of the packets of
a connection originating from an external host to the NAT address based on the existing NO-PAT entry.
port-preserved: Tries to preserve port number for PAT.
Usage guidelines
Configure outbound dynamic NAT on the interface that connects the external network to translate private
IP addresses into public IP addresses.
Outbound dynamic NAT supports the following modes:
• PAT—Performs port translation in addition to IP address translation.
• NO-PAT—Performs only IP address translation.