Configuring Nat Logging; Displaying And Maintaining Nat - H3C MSR 2600 Configuration Manual

Step
1. Enter system view.
2. Configure NAT with ALG for
the specified protocol or all
protocols.

Configuring NAT logging

NAT logging records NAT session information, such as IP address and port number translation, user
access, and network flows.
A NAT device generates NAT logs when one of the following occurs:
A NAT session is established.
•
A NAT session is removed when you add configurations with higher priority, remove configurations,
•
change ACLs, and when a NAT session ages out or a NAT session is deleted.
Active NAT flows exist. When the interval for logging active NAT flows is reached, the NAT session
•
is logged.
To enable NAT logging:
Step
1. Enter system view.
2. Enable NAT logging.
3. Enable NAT logging.

Displaying and maintaining NAT

Execute display commands in any view and reset commands in user view.
Task
Display all NAT configuration information.
Display NAT address group information.
Display NAT with DNS mapping configuration.
Display information about NAT EIM entries
(MSR 2600/MSR 3600).
Display information about NAT EIM entries
(MSR 5600).
Command
system-view
nat alg { all | dns | ftp | h323 |
icmp-error | rtsp | sip | tftp }
Command
system-view
nat log enable [ acl acl-number ]
•
For NAT session establishment
events:
nat log flow-begin
•
For NAT session removal events:
nat log flow-end
•
For active NAT flows:
nat log flow-active minutes
Command
display nat all
display nat address-group [ group-number ]
display nat dns-map
display nat eim
display nat eim [ slot slot-number ]
126
Remarks
N/A
By default, NAT with ALG is enabled.
Remarks
N/A
By default, NAT logging is
disabled.
By default, NAT logging is
disabled.