3Com Switch 8800 Advanced Software V5 Configuration Guide

1000 CHAPTER 76: NAT CONFIGURATION
[Switch-Vlan-interface10] nat server protocol tcp global 202.38.160.
100 8081 inside 10.110.10.2 www
# Configure the internal WWW server 2.
[Switch-Vlan-interface10] nat server protocol tcp global 202.38.160.
100
8080 inside 10.110.10.3 www
# Configure the internal SMTP server.
[Switch-Vlan-interface10] nat server protocol tcp global 202.38.160.
100 8025 inside 10.110.10.4 smtp
[Switch-Vlan-interface10] quit
# Enable the connection-limit function.
[[Switch] connection-limit enable
# Configure a connection-limit policy and rules.
[Switch] connection-limit policy 1
[Switch-connection-limit-policy-1] limit mode amount
[Switch-connection-limit-policy-1] limit 1 source 10.110.10.1 amount 1000
[Switch-connection-limit-policy-1] quit
# Bind the connection-limit policy with the NAT module.
[Switch] nat connection-limit-policy 1
Exporting NAT Logs to
the Information Center
Network requirements
■ A host in the private network accesses Device B in the public network through
Device A, which is enabled with NAT;
■ Device A sends NAT logs to the information center in the form of system logs;
■ You can view the records on the information center to supervise the private
network users.
Network diagram
Figure 300 Export NAT logs to information center
Configuration procedure
n
The following only lists configurations pertinent to NAT logs. Configurations
regarding the IP addresses of the devices and NAT function are omitted here.
# Specify to export the NAT logs of Device A to the information center.
Host
192.168.1.6/24
Vlan-int1
192.168 .1.5/24
Eth1 /1/2
Eth1/1 /1
1.1 .1.1/24 1.1.1.4/24
Device A
Device B
Loop1
2.2.2.2/24