Manualshelf

HP VPN Firewall Appliances NAT and ALG Command Reference

ManualsBrandsHP ManualsComputer AccessoriesHP ProCurve Switch xl Access Controller Module
11121314151617181920
12
1024 to 34999 for devices in stateful failover state, and 1024 to 65535 for devices not in stateful failover
state. The default value is 1. In the asymmetric stateful failover network scenario, configure different port
assignment levels for the address pools on the two stateful failover devices.
Usage guidelines
An address pool consists of a set of consecutive IP addresses. An address group consists of multiple
group members, each of which specifies an address pool with the address command. The address pools
of group members might not be consecutive.
You cannot remove an address pool or address group that has been associated with an ACL.
Different address pools must not overlap.
The address pools of group members must not overlap with each other or with other address pools.
The number of addresses in all address pools and address groups cannot exceed 255.
An address pool or address group is not needed in the case of Easy IP where the interface's public IP
address is used as the translated IP address.
Examples
# Configure an address pool numbered 1 that contains addresses 202.110.10.10 to 202.110.10.15.
<Sysname> system-view
[Sysname] nat address-group 1 202.110.10.10 202.110.10.15
# Create address group 2 and add a group member that contains IP addresses 10.1.1.1 through 10.1.1.15
to it.
<Sysname> system-view
[Sysname] nat address-group 2
[Sysname-nat-address-group-2] address 10.1.1.1 10.1.1.15
Related commands
• address
• display nat address-group
nat dns-map
Use nat dns-map to map the domain name to the public network information about an internal server.
Use undo nat dns-map to remove a DNS mapping.
Syntax
nat dns-map domain domain-name protocol pro-type ip global-ip port global-port
undo nat dns-map domain domain-name
Views
System view
Default command level
2: System level
Parameters
domain domain-name: Specifies the domain name of an internal server. A domain name is a string
containing no more than 255 case-insensitive characters. It consists of several labels separated by dots