Configuring Internal Server - H3C S7500 Series Operation Manual

Operation Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches
III. Configuring the Easy IP feature
You can enable the Easy IP feature by using the nat outbound command without the
address-group keyword. After that, when performing address translation, the system
will use the IP address of the VLAN interface as the translated source address. The
ACL specified in the command can be used to limit the internal addresses allowed for
NAT.
Follow these steps to configure the Easy IP feature:
Enter system view
Enter VLAN interface view
Configure the NAT Easy
IP feature
Caution:
For NAT function, basic ACL (2000 to 2999) supports only source IP address as the
filtering item, advanced ACL (3000 to 3999) supports both source IP address and
destination IP address as filtering items. Other ACL filtering items are not supported
currently.
After an ACL is configured with the nat outbound command, modifications to the
ACL (adding/deleting a rule) are invalid.
All ACLs configured for a VLAN interface with the nat outbound command can only
be configured on the same LPU.
If multiple ACL rules are configured for a VLAN interface with the nat outbound
command, The ACL rules will be matched in the following precedence order: For
rules in different ACLs, the rules with larger ACL numbers take precedence over
those with smaller ACL numbers. For rules in a same ACL, the rules configured
earlier take precedence over those configured later.

1.3.4 Configuring Internal Server

By configuring internal servers with the nat server command, you can map external
addresses and ports to internal servers, so as to enable external hosts to access
internal servers. When using the nat server command, the information you need to
input includes: external address and port, internal address and port of internal server,
and protocol type.
Follow these steps to configure internal server(s):
To do...
system-view
interface Vlan-interface vlan-id
nat outbound acl-number slot
slot-number
Use the command...
1-8
Chapter 1 NAT Configuration
Remarks
—
—
Required