R0106-HP MSR Router Series Layer 3 - IP Services Command Reference(V7)

177
• nat static net-to-net
nat static inbound
Use nat static inbound to configure a one-to-one mapping for inbound static NAT.
Use undo nat static inbound to remove a one-to-one mapping for inbound static NAT.
Syntax
nat static inbound global-ip [ vpn-instance global-name ] local-ip [ vpn-instance local-name ] [ acl
acl-number [ reversible ] ]
undo nat static inbound global-ip [ vpn-instance global-name ]
Default
No NAT mapping exists.
Views
System view
Predefined user roles
network-admin
Parameters
global-ip: Specifies an external IP address.
vpn-instance global-name: Specifies the MPLS L3VPN instance to which an external IP address belongs.
The global-name argument is a case-sensitive string of 1 to 31 characters. To specify a public IP address,
do not use this parameter.
local-ip: Specifies an internal IP address.
vpn-instance local-name: Specifies the MPLS L3VPN instance to which an internal IP address belongs.
The local-name argument is a case-sensitive string of 1 to 31 characters. To specify a public IP address,
do not use this parameter.
acl acl-number: Specifies an ACL number in the range of 3000 to 3999.
reversible: Translates the destination address of a packet that originates from internal hosts to the
external host if the packet is permitted by ACL reverse matching.
Usage guidelines
When the source IP address of a packet from the public network to the private network matches the
global-ip, the IP address is translated to the local-ip. When the destination IP address of a packet from
the private matches the local-ip, the source IP address is translated to the global-ip.
• If you do not specify an ACL, the source addresses of all incoming packets and the destination
addresses of all outgoing packets are translated.
• If you specify an ACL and do not specify the reversible keyword, the source addresses of incoming
packets permitted by the ACL are translated. The destination addresses of packets originating from
internal hosts to the external are not translated.
• If you specify both an ACL and the reversible keyword, the source addresses of incoming packets
permitted by the ACL are translated. If packets originating from internal hosts to the external are
permitted by ACL reverse matching, the destination address is translated.
Static NAT takes precedence over dynamic NAT when both are configured on an interface.