Configuring Nat - H3C S9500 Series Operation Manual

Operation Manual – NAT-URPF-VPLS
H3C S9500 Series Routing Switches
Perform the following configuration in system view.
Table 1-3 Configure an address pool
Configure an address pool
Delete an address pool
Caution:
The number of addresses included in this address pool (all the public addresses in
the address pool) cannot exceed 256.
Network segment addresses and broadcast addresses cannot be configured as the
addresses of an address pool.
Any IP address in a NAT address pool cannot be used in the internal network.
You cannot delete an address pool associated to an ACL.
There need to be less than three addresses in a NAT address pool when NAPT is
enabled.

1.3.2 Configuring NAT

By configuring the association between ACLs and the NAT address pool (or the
interface addresses), you can make the NAT server perform address translation for
packets matching the ACL criteria only. Before a packet from the intranet is forwarded
to external networks, it is first checked against the ACLs to see if it matches the
translation criteria. If it does, the NAT process will find the corresponding address pool
or the interface address by referring to the association, and then translate it.
Use the nat outbound command to associate an ACL with an address pool or interface
address. Different NAT modes need different configurations.
Caution:
If you disable NAT or NAPT and then want to enable them again, it is recommended
that you execute the reset nat session slot command.
Operation Command
nat address-group group-number start-addr
end-addr
undo nat address-group group-number
1-8
Chapter 1 NAT Configuration