H3C S7500 Series Ethernet Switches Command Manual

Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-13
Caution:
z With the nat blacklist limit amount source user-ip command, you can set different
specific thresholds to limit the NAT connection quantities of different specified users.
While, with the nat blacklist limit rate source ip command, the specific thresholds
you set to limit connection setup rate are for all specific users (users specified by the
nat blacklist limit rate source user-ip command), and you cannot set different
thresholds for different specific users.
z Each command that is used to modify blacklist-related configuration and is not
source IP address-specific must be coupled with the reset nat session command.
z Although each blacklist-enabled LPU in the switch independently maintains its own
blacklist information, blacklist-related configuration commands executed on the
switch apply to all LPUs.
Examples
# Set the specific CIR, CBS and EBS control thresholds to 100, 500 and 40
respectively.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] nat blacklist limit rate source ip cir 100 cbs 500 ebs 40
1.1.14 nat blacklist limit rate source
Syntax
nat blacklist limit rate source user-ip
undo nat blacklist limit rate source user-ip
View
System view
Parameters
user-ip: IP address of a user.
Description
Use the nat blacklist limit rate source command to specify the IP address of a user,
so as to adopt the specific connection setup rate control thresholds to the user.
Use the undo nat blacklist limit rate source command to remove the configuration.