H3C S7500 Series Operation Manual page 967

Operation Manual – NAT, Netstream, Policy Routing
H3C S7500 Series Ethernet Switches
Enter system view
Enter VLAN interface view
Configure an
internal
server
Configure a group of
consecutive internal servers
Caution:
Up to 128 internal servers can be configured in one nat server command.
Up to 768 nat server commands can be configured for one VLAN interface.
Up to 4096 internal servers can be configured for one VLAN interface.
Up to 1024 nat server commands and 4096 internal servers can be configured in
the system.
In the above commands, the global-addr and global-port arguments respectively
represents the public IP address and service port number provided for external devices
to access an internal server; the host-addr and host-port arguments respectively
represents the IP address and service port number of the server in the internal network.
The global-port and host-port arguments are not needed if a protocol other than TCP
and UDP is used which does not use port number.
Note that the host-port argument ranges from 0 to 65,535 and can be replaced by
keywords for well-known port numbers. For example, you can use www to replace
WWW service port 80, and ftp to replace FTP service port 21. Port number 0 and
keyword any have the same meaning: the internal server can provide any available
services in the internal network; but this is not supported currently.
To do...
TCP/UDP is
used
A protocol
other than
TCP/UDP is
used
Use the command...
system-view
interface Vlan-interface vlan-id
nat server protocol pro-type
global global-addr global-port
inside host-addr host-port slot
slot-number
nat server protocol pro-type
global global-add inside
host-addr slot slot-number
nat server protocol pro-type
global global-addr global-port1
global-port2 inside host-addr1
host-addr2 host-port slot
slot-number
1-9
Chapter 1 NAT Configuration
Remarks
—
—
Perform
configuration
as required