< Home

destination-nat address-group (security zone view)

Function

The destination-nat address-group command configures the destination NAT based the address pool.

The undo destination-nat address-group command deletes the destination NAT based the address pool.

Format

destination-nat acl-number address-group { address-group-number | address-group-name } [ port port-number ]

undo destination-nat acl-number address-group { address-group-number | address-group-name } [ port port-number ]

Parameters

Parameter Description Value
acl-number Specifies the ACL group number. It is an integer that ranges from 2000 to 3999.
address-group-name Specifies the name of the destination address pool. The address pool must exist.
address-group-number Specifies the ID of the destination NAT address pool.

The value is an integer ranging from 0 to 255.

port port-number Specifies the destination port number. It is an integer that ranges from 1 to 65535.

Views

Security zone view

Default Level

2: Configuration level

Usage Guidelines

By default, the destination NAT based the address pool is not configured.

Only the USG6510E/6510E-POE/6530E does not support this command.

Example

# Translate the destination IP address in the destination NAT address pool named nataddr of the packets from IP address 10.0.0.1.

<sysname> system-view
[sysname] acl 3333
[sysname-acl-adv-3333] rule permit ip source 10.0.0.1 0
[sysname-acl-adv-3333] quit
[sysname] firewall zone trust
[sysname-zone-trust] destination-nat 3333 address-group nataddr
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >