H3C S7500 Series Ethernet Switches Command Manual

Command Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches Chapter 1
NAT Configuration Commands
1-18
global-port1, global-port2: Specifies a range of consecutive port numbers, which are
one-to-one corresponding to the private addresses in the specified internal host
address range. global-port2 must be larger than global-port1.
host-addr1, host-addr2: Specifies a range of consecutive addresses, which are
one-to-one corresponding to the port numbers in the above port number range.
host-addr2 must be larger than host-addr1.
slot-number: Slot number of an LPU.
Description
Use the nat server command to define mapping table entries for internal servers. By
using the address and port number specified by the global-addr and the global-port
arguments for an internal server, external users can access the internal server with the
address and port number specified by the host-addr and host-port arguments.
Use the undo nat server command to delete an internal server mapping entry.
You can use the nat server command to allow some internal servers to be accessed by
external users. Some examples of such servers are WWW, FTP, Telnet, POP3, and
DNS.
Caution:
z Up to 128 internal servers can be configured in one nat server command.
z Up to 768 nat server commands can be configured for one VLAN interface.
z Up to 4,096 internal servers can be configured for one VLAN interface.
z Up to 1,024 nat server commands and 4,096 internal servers can be configured in a
system.
 Note:
z The interface configured with this command is an egress of the internal network and
should be directly connected to an ISP network.
z Currently, secondary address translations on a NAT connection is not supported.
z To use the NetMeeting software or enable an internal FTP server, you need to
configure both the nat server and nat outbound commands. For details, refer to
1.1.15 “nat outbound”.