3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

336 CHAPTER 19: NAT CONFIGURATION COMMANDS
# By the command below, the internal ftp server of VPN vrf10 can be removed.
[SecBlade_FW-GigabitEthernet0/0.1] undo nat server protocol tcp
global 202.110.10.11 8070 inside 10.110.10.11 ftp
# Specify an outside address as 202.110.10.10, and map the ports ranging from
1001 to 1100 to the addresses of 10.110.10.1 to 10.110.10.100 respectively to
access ftp service inside VPN vrf10. 202.110.10.10:1001 accesses 10.110.10.1
and 202.110.10:1002 accesses 10.110.10.2, etc.
[SecBlade_FW-GigabitEthernet0/0.1] nat server protocol tcp global
202.110.10.10 1001 1100 inside 10.110.10.1 10.110.10.100 telnet
nat static Syntax
nat static ip-addr1 ip-addr2
undo nat static ip-addr1 ip-addr2
View
System view
Parameter
ip-addr1: Private IP address of an internal host.
ip-addr2: Public IP address.
Description
Use the nat static command to configure a one-to-one private-to-public address
binding.
Use the undo nat static command to delete an existing one-to-one
private-to-public address binding.
Example
# Bind an internal private IP address with a public IP address for one-to-one
address translation.
[SecBlade_FW] nat static 192.168.1.1 2.2.2.2
nat static inside ip Syntax
nat static inside ip inside-start-address inside-end-address global global-address
mask
undo nat static inside ip inside-start-address inside-end-address global
global-address mask
View
System view
Parameter
inside-start-address: Start internal address that the specified static NAT entry will
convert.