Nat Outbound - H3C S9500 Series Command Manual

Command Manual – NAT
H3C S9500 Series Routing Switches

1.1.19 nat outbound

Syntax
nat outbound acl-number [ address-group group-number [ no-pat ] ] slot slot-no
undo nat outbound acl-number [ address-group group-number [ no-pat ] ] slot
slot-no
View
VLAN interface view
Parameters
address-group: Configure the NAT by using the address pool. If you do not specify the
address pool, the IP address of the interface is used as the translated address, that is,
the Easy IP feature.
no-pat: Specifies that only IP addresses included in data packets are translated while
the port number information is left unused.
acl-number: ACL number, in the range 2,000 to 3,999.
group-number: Address pool number, in the range 0 to 319.
slot-no: Number of the slot where the NAT LPU resides.
Description
Use the nat outbound command to associate an ACL with an address pool.
Use the undo nat outbound command to delete the corresponding NAT rule.
After the association, the addresses meeting the criteria of acl-number can use address
pool group-number for NAT. The NAT LPU in which the address pool resides is
specified for NAT. All the address translations using this address pool are processed on
this NAT LPU.
After configuring the association between the ACL and the address pool, the eligible
source address of a data packet will be translated by either selecting an address from
the address pool or using the IP address of the interface directly. Multiple NAT
associations can be configured on a VLAN interface, which is normally connected to
the ISP and acts as the egress of the internal network. You may use the corresponding
undo command to delete a NAT association.
If you do not specify any value for the address-group keyword, the Easy IP feature is
implemented for NAT, and the IP address of the interface is used as the translated
address.
Chapter 1 NAT Configuration Commands
1-18