2036 CHAPTER 133: NAT CONFIGURATION COMMANDS

nat server [ vpn-instance vpn-instance-name] protocol pro-typeglobal

{global-address interface { interface-type interface-number} current-interface} [ global-port ] inside host-address [ host-port ]

undo nat server [ vpn-instance vpn-instance-name] protocol pro-typeglobal

{global-address interface { interface-type interface-number} current-interface} global-port1 global-port2 inside host-address1 host-address2 host-port

undo nat server [ vpn-instance vpn-instance-name] protocol pro-typeglobal

{global-address interface { interface-type interface-number} current-interface} [ global-port ] inside host-address [ host-port ]

View Interface view

Parameter vpn-instance-name: Instance name of a VPN to which an internal server belongs, in the range 1 to 31 characters. Absence of this parameter indicates that the internal server belongs to a normal private network instead of an MPLS VPN instance.

pro-type: Type of protocols over IP. It could be provided either in protocol number or key word, such as icmp (or its protocol number 1), tcp (or 6), udp (or 17). The value ranges from 1 to 255.

global-address: A valid IP address designated for external access.

interface: Uses a specified interface address as the public IP address of an internal server. This only applies to Easy IP.

interface-typeinterface-number: Specifies the interface type and interface number. Currently, this interface must be an existing Loopback interface.

current-interface: Uses the current interface address as the public IP address of an internal server.

global-port1,global-port2: Jointly specifies a port range that corresponds to the IP address range of internal hosts. Note that global-port2must be greater than global-port1.

host-address1,host-address2: Jointly defines a sequence of addresses that corresponds to the port range. Note that host-address2must be greater than host-address1and that the range and number of the addresses must match those of the ports.

host-port: Port number provided by the NAT server, in the range 0 to 65,535. The default value is 0, suggesting a static connection between the global-addressand host-address.

You can use the service names (or keywords) to represent those well-known port numbers, for example, you can use www to represent port number 80, ftp to represent port number 21, and so on.

In particular, you can use the keyword any to represent port number 0, which means all types of services are supported.

The support for a default port number varies by device models.

Page 2036
Image 2036
3Com MSR 30, MSR 50 manual NAT Configuration Commands