Huawei Quidway S8500 Series Command Manual page 1214

Command Manual – NAT&URPF&VPLS
Quidway S8500 Series Routing Switches
host-addr1 [ host-addr2 ]: Specifies an address scope of internal hosts that
corresponds to the address range of external service port numbers. host-addr2 must
be bigger than host-addr1. The number of the address scope must be the same as the
number of external service ports.
pro-type: Indicates the type of the protocol that IP protocol carries. The protocol number
ranges from 1 to 255. You can also use keys to replace. For example, 6 for tcp, 17 for
udp, and 1 for icmp.
slotno: Specifies number of the slot in which the NAT board resides.
Description
Use the nat server command to define mapping relationships from external public
addresses and external service port numbers to internal addresses and internal service
port numbers.
Use the undo nat server command to cancel the mapping table.
The system will execute the reset nat session command automatically after the undo
nat server command is executed.;
After the configuration, by using the address and port number defined by the
global-addr and the global-port parameters, you can access the internal server with the
address and port number specified by the host-addr and host-port parameters.
Caution:
Up to 256 internal server translation commands can be configured for a VLAN
interface.
Up to 4096 internal servers can be configured for a VLAN interface.
Only the same LSBM1NATB board can be configured for a VLAN interface.
Up to 1024 internal server translation commands can be configured in a system.
The interface configured with this command should be connected to the ISP and acts
as the egress of the internal network.
Example
# Specify the IP address of the internal WWW server to be 10.110.10.10, the IP address
of the internal FTP server to be 10.110.10.11, and allow external hosts to access the
WWW server and FTP server by http://202.110.10.10:8080 and ftp://202.110.10.10
respectively. Suppose that Vlanif2 is connected to the ISP.
[Quidway-Vlan-interface2] nat server protocol tcp global 202.110.10.10 8080
inside 10.110.10.11 www slot 3
Huawei Technologies Proprietary
1-14
Chapter 1 NAT Configuration Commands