nat full-cone global alarm public-ip port-number threshold trap enable

Function

The nat full-cone global alarm public-ip port-number threshold trap enable command enables the sending function of the alarm on the port usage for the public IP addresses in the address pool.

The undo nat full-cone global alarm public-ip port-number threshold trap enable command disables the sending function of the alarm on the port usage for the public IP addresses in the address pool.

Format

nat full-cone global alarm public-ip port-number threshold trap enable

undo nat full-cone global alarm public-ip port-number threshold trap enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

In 3-tuple NAT scenarios, configure the function of sending port usage alarms to monitor address pool port usage of each IP address. When the port usage of a public IP address in the 3-tuple address pool reaches the specified threshold, the FW sends an alarm and a log.

For example, the default smallest port allocatable for each address in the address pool is 2048, and the largest port is 65535. Then the number of allocatable ports for each address is 63488 (65535-2048+1). When the number of ports used by a public IP address in the address pool reaches 63488 x threshold-value, the FW sends a log and an alarm.

threshold-value can be set by the nat full-cone global alarm public-ip port-number threshold command.

By default, the sending function of the alarm on the port usage for the public IP addresses in the address pool is disabled.

Only the USG6510E/6510E-POE/6530E does not support this command.

Example

# Enable the sending function of the alarm on the port usage for the public IP addresses in the address pool.

<sysname> system-view
[sysname] nat full-cone global alarm public-ip port-number threshold trap enable