Huawei Quidway S8500 Series Command Manual page 1212

Command Manual – NAT&URPF&VPLS
Quidway S8500 Series Routing Switches
Description
Use the nat outbound command to associate an ACL with an address pool. After the
association, the addresses meeting the criteria of acl-number can use address pool
group-number for NAT. The NAT service processor card in which the address pool
resides is specified for NAT.
Use the undo nat outbound command to delete the corresponding NAT rule. The
system will execute the reset nat session command automatically after the undo nat
outbound command is executed.
After configuring the association between the ACL and the address pool, the eligible
source address of a data packet will be translated by either selecting an address from
the address pool or using the IP address of the interface directly. Multiple NAT
associations can be configured on a VLAN interface, which is normally connected to
the ISP and acts as the egress of the internal network. You may use the corresponding
undo command to delete a NAT association.
If you do not specify any value for the keyword address-group, the EASY IP feature is
implemented for NAT, and the IP address of the interface is used as the translated
address.
Note:
As for the ACL associated with an address pool, only the source IP address and the
destination IP address in it are used. They are also used to tell whether or not two rules
conflict.
Example
# Allow hosts on segment 10.110.10.0/24 to be translated into addresses from
202.110.10.10 to 202.110.10.12. Suppose VLAN interface 2 is connected to the ISP.
[Quidway] acl number 1
[Quidway-acl-basic-1] rule permit source 10.110.10.0 0.0.0.255
[Quidway-acl-basic-1] rule deny
# Configure the address pool.
[Quidway] nat address-group 1 202.110.10.10 202.110.10.12
# Enable NAT on service processor card in slot 3 using addresses from address pool 1
and TCP/UDP port information.
[Quidway-Vlan-interface2] nat outbound 1 address-group 1 slot 3
# Delete the corresponding configuration.
[Quidway-Vlan-interface2] undo outbound 1 address-group 1 slot 3
Huawei Technologies Proprietary
1-12
Chapter 1 NAT Configuration Commands