HP VPN Firewall Appliances NAT and ALG Command Reference

15
[Sysname-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255
[Sysname-acl-basic-2001] rule deny
[Sysname-acl-basic-2001] quit
[Sysname] nat address-group 1 202.110.10.10 202.110.10.12
# Configure address pool 1.
[Sysname] nat address-group 1 202.110.10.10 202.110.10.12
# Use addresses in address pool 1 as translated addresses and TCP/UDP port information.
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001 address-group 1
# Use addresses in address pool 1 as translated addresses without using TCP/UDP port information.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001 address-group 1 no-pat
# Use the IP address of interface GigabitEthernet 0/1 as translated address.
<Sysname> system-view
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound 2001
nat outbound static
Use nat outbound static to enable static NAT on an interface, making the configured static NAT
mappings take effect.
Use undo nat outbound static to disable static NAT on the interface.
Syntax
nat outbound static [ track vrrp virtual-router-id ]
undo nat outbound static [ track vrrp virtual-router-id ]
Views
Interface view
Default command level
2: System level
Parameters
track vrrp virtual-router-id: Associates static NAT with a VRRP group. The virtual-router-id argument
indicates the number of the VRRP group, in the range of 1 to 255. If this option is not specified, no VRRP
group is associated.
Examples
# Configure a one-to-one NAT mapping, and enable static NAT on interface GigabitEthernet 0/1.
<Sysname> system-view
[Sysname] nat static 192.168.1.1 2.2.2.2
[Sysname] interface gigabitethernet 0/1
[Sysname-GigabitEthernet0/1] nat outbound static
Related commands
display nat static