H3C S7500 Series Ethernet Switches Command Manual

Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-11
Caution:
z With the nat blacklist limit amount source user-ip command, you can set different
specific thresholds to limit the NAT connection quantities of different specified users.
While, with the nat blacklist limit rate source ip command, the specific thresholds
you set to limit connection setup rate are for all specific users (users specified by the
nat blacklist limit rate source user-ip command), and you cannot set different
thresholds for different specific users.
z Each command that is used to modify blacklist-related configuration and is not
source IP address-specific must be coupled with the reset nat session command.
z Although each blacklist-enabled LPU in the switch independently maintains its own
blacklist information, blacklist-related configuration commands executed on the
switch apply to all LPUs.
Examples
# Set the global threshold to control the number of NAT connections per user.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] nat blacklist limit amount 600
# Set a specific threshold to control the number of NAT connections of the user with IP
address 1.1.1.2.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] nat blacklist limit amount source 1.1.1.2 800
1.1.13 nat blacklist limit rate
Syntax
nat blacklist limit rate [ source ip ] cir cir-value [ cbs cbs-value ebs ebs-value ]
undo nat blacklist limit rate [ source ip ]
View
System view
Parameters
source ip: Specifies that the control thresholds for connection setup rate are set for
specific source IP addresses (IP addresses specified by the nat blacklist limit rate
source user-ip command).