< Home

nat-dslite server

Function

The na-dispute server command configures the mapping table of interval servers.

The undo nat-dslite server command clears the previous configuration.

Format

nat-dslite server [ server-id ] [ zone zone-name ] [ protocol { protocol-type | protocol-number } ] global global-address global-port inside host-address host-port [ unr-route ] [ vrrp virtual-router-id [ no-reverse ] ] cpe cpe-ip tunnel tunne-number [ description text ]

nat-dslite server [ server-id ] [ zone zone-name ] [ protocol { protocol-type | protocol-number } ] global global-address inside host-address [ unr-route ] [ vrrp virtual-router-id [ no-reverse ] ] cpe cpe-ip tunnel tunne-number [ description text ]

undo nat-dslite server [ zone zone-name ] [ protocol { protocol-type | protocol-number } ] global global-address global-port inside host-address host-port [ vrrp virtual-router-id ] cpe cpe-ip tunnel tunne-number

undo nat-dslite server [ zone zone-name ] [ protocol { protocol-type | protocol-number } ] global global-address inside host-address [ vrrp virtual-router-id ] cpe cpe-ip tunnel tunne-number

nat-dslite server server-id unr-route enable

undo nat-dslite server server-id [ unr-route enable ]

Parameters

Parameter Description Value

server-id

The ID of server.

The value is an integer ranging from 0 to 511.

global-address

Refers to the IP address (a public network IP address) for the access of external hosts.

The value is in dotted decimal notation.

host-address

Refers to the internal IP address of the server.

The value is in dotted decimal notation.

protocol-type protocol-number

Refers to the type and number of the protocol over IP.

The value can be 1, 6, 17, 41, 47, 50, or 51 if it is entered in the format of an integer. The value can be tcp, udp, sctp or icmp if it is entered in the format of a name.

global-port

Specifies a port for external accesses.

If the value is entered in the format of an integer, the value ranges from 0 to 65535. When the value is 0, it indicates that any port number is applicable. If this parameter is not entered or the any parameter is entered, it indicates that any port number is applicable.

host-port

Refers to the number of service port provided by the server.

If the value is entered in the format of an integer, the value ranges from 0 to 65535. When the value is 0, it indicates that any port number is applicable. If this parameter is not entered or the any parameter is entered, it indicates that any port number is applicable.

unr-route

Delivers the UNR route to prevent routing loops.

By default, no UNRs are delivered.

If global-address is the WAN interface address, UNRs are not required.

cpe cpe-ip

Specifies the IPv6 address of the remote family gateway (or CPE).

-

tunnel tunne-number

Specifies the ID of the DS-Lite tunnel connected to the remote family gateway (or CPE).

The value is an integer ranging from 0 to 1023.

virtual-router-id

Specifies the ID of a VRRP backup group.

It is an integer that ranges from 1 to 255.

zone-name

Specifies the name of a security zone.

It is a string of 1 to 32 case-insensitive characters, starting with a letter from a to z or A to Z.

description text

Specifies the description of the nat-dslite server.

The value is a string of 1 to 31 characters, which can be blank spaces.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

When multiple internal servers advertise to the external networks with the same public IP address, you can run the na-dispute server command for several times, but the global ports are different. When you configure the nat-dslite server protocol command, if one of global-port and host-port is defined as any, the other must be defined as any or left undefined.

If the nat-dslite server command is used but no UNR is configured, run the nat-dslite server server-id unr-route enable command and keep other configurations unchanged. In this manner, users can flexibly configure UNRs.

Example

# Set the IP address of the Web server on the LAN to 10.110.10.10 and that of the FTP server to 10.110.10.11. Allow the external hosts to access them respectively from http://2.2.2.2:8080 and ftp://2.2.2.2.

<sysname> system-view
[sysname] nat-dslite server protocol tcp global 2.2.2.2 8080 inside 10.110.10.10 www cpe 8000::1 tunnel 0
[sysname] nat-dslite server protocol tcp global 2.2.2.2 ftp inside 10.110.10.11 ftp cpe 8000::1 tunnel 0
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >