Nat Static Outbound - HP MSR Series Command Reference Manual

nat static outbound

Use nat static outbound to configure a one-to-one mapping for outbound static NAT.
Use undo nat static outbound to remove a one-to-one mapping for outbound static NAT.
Syntax
nat static outbound local-ip [ vpn-instance local-name ] global-ip [ vpn-instance global-name ] [ acl
{ acl-number | name acl-name } [ reversible ] ]
undo nat static outbound local-ip [ vpn-instance local-name ]
Default
No NAT mapping exists.
Views
System view
Predefined user roles
network-admin
Parameters
local-ip: Specifies a private IP address.
vpn-instance local-name: Specifies the MPLS L3VPN instance to which the private IP address belongs.
The local-name argument is a case-sensitive string of 1 to 31 characters. If the private IP address does not
belong to any VPN instance, do not specify this option.
global-ip: Specifies a public IP address.
vpn-instance global-name: Specifies the MPLS L3VPN instance to which the public IP address belongs.
The global-name argument is a case-sensitive string of 1 to 31 characters. If the public IP address does
not belong to any VPN instance, do not specify this option.
acl: Specifies an ACL.
acl-number: Specifies an ACL by its number in the range of 3000 to 3999.
name acl-name: Specifies an ACL by its name, a case-insensitive string of 1 to 63 characters.
reversible: Allows reverse address translation. Reverse address translation applies to connections
actively initiated by external hosts to the internal host. It uses the mapping to translate the destination
address for packets of these connections if the packets are permitted by ACL reverse matching.
Usage guidelines
When the source IP address of an outgoing packet matches the local-ip, the IP address is translated into
the global-ip. When the destination IP address of an incoming packet matches the global-ip, the
destination IP address is translated into the local-ip.
If you do not specify an ACL, the source address of all outgoing packets and the destination address
•
of all incoming packets are translated.
• If you specify an ACL and do not specify the reversible keyword, the source address of outgoing
packets permitted by the ACL is translated. The destination address of packets is not translated for
connections actively initiated by external hosts to the internal host.
If you specify both an ACL and the reversible keyword, the source address of outgoing packets
•
permitted by the ACL is translated. If packets of connections actively initiated by external hosts to the
internal host are permitted by ACL reverse matching, the destination address is translated.
232