H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-16
Examples
Perform the following procedure to allow hosts on segment 10.110.10.0/24 to be
translated into addresses from 202.110.10.10 to 202.110.10.12. Suppose
VLAN-interface 2 is connected to an ISP network.
# Configure an ACL.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] acl number 2000
[H3C-acl-basic-2000] rule permit source 10.110.10.0 0.0.0.255
[H3C-acl-basic-2000] rule deny
[H3C-acl-basic-2000] quit
# Configure a NAT address pool.
[H3C] nat address-group 1 202.110.10.10 202.110.10.12
# Configure NAPT on the LPU in slot 3 with address pool 1.
[H3C] interface Vlan-interface 2
[H3C-Vlan-interface2] nat outbound 2000 address-group 1 slot 3
# Remove the NAPT configuration.
[H3C-Vlan-interface2] undo nat outbound 2000 address-group 1 slot 3
# Configure one-to-one NAT on the LPU in slot 3 with address pool 1.
[H3C-Vlan-interface2] nat outbound 2000 address-group 1 no-pat slot 3
# Remove the one-to-one NAT configuration.
[H3C-Vlan-interface2] undo nat outbound 2000 address-group 1 no-pat slot 3
# Configure the Easy IP feature, to directly use the IP address of VLAN-interface 2 for
address translation.
[H3C-Vlan-interface2] nat outbound 2000 slot 3
# Remove the Easy IP configuration.
[H3C-Vlan-interface2] undo nat outbound 2000 slot 3
1.1.16 nat server
Syntax
1) Configure an internal server
z Use the following command when TCP/UDP is used.
nat server protocol pro-type global global-addr global-port inside host-addr host-port
slot slot-number
z Use the following command when protocols other than TCP/UDP are used.
nat server protocol pro-type global global-addr inside host-addr slot slot-number