Display Nat Blacklist - H3C S9500 Series Command Manual

Command Manual – NAT
H3C S9500 Series Routing Switches

1.1.5 display nat blacklist

Syntax
display nat blacklist { all | [ vpn-instance vpn-name ] ip [ ip-address ] slot slot-no }
View
Any view
Parameters
all: Displays all blacklist configurations.
vpn-instance vpn-name: Specifies the VPN that the user configured in the blacklist
belongs to.
ip ip-address: IP address configured in the blacklist.
slot slot-no: Specifies the slot where the NAT service board resides.
Description
Use the display nat blacklist command to display the blacklist configurations and
operation states.
Use the display nat blacklist all command to display all the configurations of the
blacklist.
Use the display nat blacklist vpn-instance vpn-name ip ip-address slot slot-no
command to display the blacklist configurations and operation states for an IP address
in a VPN.
Examples
# Display all the configurations of the blacklist.
<H3C> display nat blacklist all
Blacklist function global configuration:
Blacklist function is started.
Connection amount control is enabled.
Connection set-up rate control is enabled.
Amount control limit: 500 sessions.
Rate control limit: 250 session/s.
Special rate control limit: 250 session/s.
Global Committed Burst Size is 150
Special IP Committed Burst Size is 150
Altogether 1 IP addresses have special configuration:
Control limit configuration of VPN vpn1 IP 100.0.0.3:
Amount control limit: 500 sessions.
Chapter 1 NAT Configuration Commands
1-4