Port-Mapping Host - H3C MSR Series Command Reference Manual

Default
An application protocol is mapped to a well-known port.
Views
System view
Predefined user roles
network-admin
Parameters
application application-name: Specifies an application protocol by its name, a case-insensitive
string of 1 to 63 characters. The names invalid and other are not allowed.
port port-number: Specifies a port by its number in the range of 0 to 65535.
protocol protocol-name: Specifies a transport layer protocol by its name, including:
•
dccp: Specifies DCCP.
•
sctp: Specifies SCTP.
•
tcp: Specifies TCP.
•
udp: Specifies UDP.
•
udp-lite: Specifies UDP-Lite.
acl [ ipv6 ] acl-number: Specifies the number of an ACL, in the range of 2000 to 2999. To specify an
IPv6 ACL, include the ipv6 keyword. To specify an IPv4 ACL, do not include the ipv6 keyword.
Usage guidelines
APR uses ACL-based host-port mappings to recognize packets. A packet is recognized as an
application protocol packet when it matches all the following conditions in a mapping:
•
The packet's destination IP address matches the specified source IP address defined in the
ACL.
•
The packet's destination port matches the specified port in the mapping.
•
The transport layer protocol that encapsulates the packet matches the specified transport layer
protocol if you specify a transport layer protocol in the mapping.
If two port mappings are configured with the same port number, transport layer protocol, and ACL,
but with different application protocols, the most recent configuration takes effect.
A mapping with the transport layer protocol specified has a higher priority than one without it.
Examples
# Create a port mapping of port 3456 to FTP for the packets matching the ACL 2000.
<Sysname> system-view
[Sysname] port-mapping application ftp port 3456 acl 2000
Related commands
display port-mapping user-defined

port-mapping host

Use port-mapping host to configure an IP address-based host-port mapping.
Use undo port-mapping host to remove an IP address-based host-port mapping.
Syntax
port-mapping application application-name port port-number [ protocol protocol-name ] host { ip
| ipv6 } start-ip-address [ end-ip-address ] [ vpn-instance vpn-instance-name ]
855