Nat Server - H3C S9500 Series Command Manual

Command Manual – NAT
H3C S9500 Series Routing Switches

1.1.20 nat server

Syntax
nat server protocol { tcp | udp } global global-addr global-port inside [ vpn-name ]
host-addr host-port slot slot-no
undo nat server protocol { tcp | udp } global global-addr global-port inside
[ vpn-name ] host-addr host-port slot slot-no
nat server protocol { tcp | udp } global global-addr global-port1 global-port2 inside
[ vpn-name ] host-addr1 host-addr2 host-port slot slot-no
undo nat server protocol { tcp | udp } global global-addr global-port1 global-port2
inside [ vpn-name ] host-addr1 host-addr2 host-port slot slot-no
nat server protocol { icmp | tcp | udp } global global-addr inside [ vpn-name ]
host-addr slot slot-no
undo nat server protocol { icmp | tcp | udp } global global-addr inside [ vpn-name ]
host-addr slot slot-no
View
VLAN interface view
Parameters
global-addr: Server's public IP address by which external devices can access servers.
global-port: External service port numbers of servers. When TCP or UDP is selected as
the protocol type, the external devices can access the services provided by servers
through the external service ports.
host-addr: IP address of the server on the internal LAN.
host-port: Service port number provided by the server, in the range from 0 to 12287. A
value of 0 indicates the server can provide any type of services. You can use a keyword
to indicate a frequently used port number. For example, you can use www for WWW
service port number 80, ftp for ftp service port number 21, and any for 0.
Note that the global-port argument must be any when the host-port argument is any,
indicating an AnyServer is configured. Otherwise, this configuration does not take
effect.
global-port1 global-port2: Specifies a scope of external service port numbers that
corresponds to the address range of internal hosts. global-port2 must be bigger than
global-port1, and the corresponding host-port cannot be 0.
vpn-name: Name of the VPN of the internal server private network side. If this
argument is not specified, the private network side does not belong to any VPN.
Note that IP addresses cannot be used as vpn-name. If you use IP addresses as VPN
names, the CLI treats them as IP addresses uniformly.
Chapter 1 NAT Configuration Commands
1-21