exclude-ip

Function

The exclude-ip command excludes IP addresses from the NAT address pool.

The undo exclude-ip command stops excluding IP addresses from the NAT address pool.

exclude-ip { ip-address1 [ to ip-address2 ] | ip-address1 mask { mask-value | mask-length } }

undo exclude-ip { ip-address1 [ to ip-address2 ] | ip-address1 mask { mask-value | mask-length } }

Parameter	Description	Value
ip-address1	Specifies the IP address or the start IP address of an IP address range to be excluded.	The value is in decimal dotted notation.
ip-address2	Specifies the end IP address to be excluded that forms an IP address range together with start-ip-address.	The value is in decimal dotted notation.
mask-value	Specifies the mask of the subnet.	The value is in decimal dotted notation.
mask-length	Specifies the length of the subnet mask.	The value is an integer ranging from 1 to 32.

Address pool view

2: Configuration level

By default, no exclude IP address is configured.

Each address pool can exclude the IP addresses on a maximum of 100 address segments, each of which can exclude 4096 addresses.

# Exclude the IP addresses range from 1.1.1.10 to 1.1.1.100.

<sysname> system-view
[sysname] nat address-group nataddr 1
[sysname-address-group-nataddr] exclude-ip 1.1.1.10 to 1.1.1.100