H3C S7500 Series Ethernet Switches Command Manual

Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-14
Caution:
z With the nat blacklist limit amount source user-ip command, you can set different
specific thresholds to limit the NAT connection quantities of different specified users.
While, with the nat blacklist limit rate source ip command, the specific thresholds
you set to limit connection setup rate are for all specific users (users specified by the
nat blacklist limit rate source user-ip command), and you cannot set different
thresholds for different specific users.
z Each command that is used to modify blacklist-related configuration and is not
source IP address-specific must be coupled with the reset nat session command.
z Although each blacklist-enabled LPU in the switch independently maintains its own
blacklist information, blacklist-related configuration commands executed on the
switch apply to all LPUs.
Examples
# Specify to control user 2.2.2.2 with specific connection setup rate thresholds.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] nat blacklist limit rate source 2.2.2.2
1.1.15 nat outbound
Syntax
nat outbound acl-number [ address-group group-number [ no-pat ] ] slot
slot-number
undo nat outbound acl-number [ address-group group-number [ no-pat ] ] slot
slot-number
View
VLAN interface view
Parameters
address-group: Specifies an address pool to be used for NAT. If you do not specify an
address pool in the command, the IP address of the current interface will be used as the
translated source IP address, that is, the Easy IP feature is enabled.
no-pat: Specifies to use one-to-one NAT, so that only the source IP addresses in
packets are translated while the port numbers are not translated.
acl-number: Index of an ACL, in the range from 2000 to 3999.