Nat - Ericsson HL950 Administrator's Manual

Multi Service Edge Device HL950
Administrator's Guide
I2SPI<NUM>: Inbound SPI for 2nd TF (Manual policy)
O2SPI<NUM>: Outbound SPI for 2nd TF (Manual policy)
PFSGR<STR>: Perfect Fwd Secrecy Gr. Valid values are NONE, MODP768, and
MODP1024 (Auto policy).
LIKB<NUM>: Lifetime of the key in KB (Auto policy). This is the maximum number of
kilobytes that may be passed through this policy. When the limit has been reached, the keys
are re-negotiated.
LITM<NUM>: Lifetime of the key in seconds (Auto policy). This decides for how long the
key exchange is effective. After this lifetime the keys are re-negotiated.
KLEN<NUM>: Key length used for AES encryption; 16, 24, or 32 characters (Auto policy).
The user must specify the length of the key to use as the key will be generated automatically.
It must be the same for the Peer security gateway.
ALL<BOOL>: Whether to display all (inbound and outbound) policies
6.6.8

NAT

Used to control the NAT (Network Address Translation) service.
Authority: ADMIN
Prefixes Parameters and Descriptions
NAME<STR>: NAT policy name.
SET
TYPE<STR>: NAT type. Valid values are ONE-ONE, MANY-ONE, and MANY-MANY.
SHOW
ADD DIRECTION<STR>: Policy type. Valid values are WAN-LAN and LAN-WAN.
DEL
ALLOW<BOOL>: Allow or deny this NAT policy. Default: YES
START
STOP
PIPS<IP>: Start private IP address range
PIPE<IP>: End private IP address range Default: PIPS
PPORTS<NUM>: Start private port address range
PPORTE<NUM>: End private port address range
NIPS<IP>: Start public IP address range
NIPE<IP>: End public IP address range. Default: NIPS
NPORTS<NUM>: Start NAT port address range. Default: All ports
NPORTE<NUM>: End NAT port address range. Default: All ports
POSITION<STR>: Policy position. Valid values are BEGIN, END, BEFORE, and AFTER.
Default: BEGIN
NUMBER<NUM>: Policy number, need with AFTER and BEFORE.
EN/LZT 108 5995 R3
June 2003
Page 118 (159)