Policy Modify - Zte ZXR10 8900 Series Command Manual

Command
Function
Command Format
Parameter
Description
public network through FW and apply this policy before the address
translation policy whose id is 8144.
Predefined conditions:
1. IP address of host A is "10.10.10.22" (address object is
"10.22");
2. Host A address after translation on FW is "201.10.10.1" (ad-
dress object name is "public address 1");
3. Gei_5/1 of FW is connected to intranet and gei_5/2 is
connected to public network (area resource names are
area_gei_5/1 and area_gei_5/2 respectively).
# policy add srcarea area_gei_5/1 dstarea area_gei_5/2
orig_ src 10.22 trans_src public network address 1
enable yes before 8144
Add and enable one destination address translation policy. When
one Internet user accesses WEB server through FW, public network
address 202.99.27.201 (address object name is nat_address1)
is used for accessing so as to hide the actual server address
172.168.1.2 (address object name is web_server1) in intranet.
# policy add orig_dst nat_address1 orig_service HTTP
trans_dst web_server1 enable yes

policy modify

This command is used to modify NAT policy.
policy modify id <number>[srcarea <srcarea_nam>][dstarea
<dstarea_nam>][srcvlan <srcvlan_no>][dstvlan <dstvlan_no
>][orig_src <src_addr1>][orig_dst <dst_addr1>][orig_sport
<sport_id>][orig_service <ser_id>][trans_src < src_addr2
>][trans_dst <dst_addr2>][trans_service
<yes|no>][enable <yes|no>]
Parameter
modify
id
<number>
srcarea
<srcarea_nam>
dstarea
Confidential and Proprietary Information of ZTE CORPORATION
Description
Modifying NAT policy.
This sets ID of policy to be modified.
This is one number, which is the ID of policy
to be modified.
This modifies source area.
This is one string and source area resource
name after modification is input here.
Tips:
This parameter value must be predefined
area name. One ore more area names can be
input here. As for multiple area names, space
is used between each two area names and all
area names are quoted with single quotes,
such as 'area1 area2'.
This modifies one destination area.
Chapter 9 policy (nat)
<ser_obj>][pat
99