< Home

srcip-car-num

Function

The srcip-car-num command sets the maximum number of private addresses corresponding to a public address.

The undo srcip-car-num command deletes the maximum number of private addresses corresponding to a public address.

Format

srcip-car-num srcip-number [no-port-translation]

undo srcip-car-num

Parameters

Parameter Description Value

srcip-number

Specifies the maximum number of private addresses corresponding to a public address. This value shall be configured based on the actual networking.

The value is an integer ranging from 1 to 63488.

no-port-translation

Indicates that ports probably remain unchanged during NAT. When packets go through source address translation, the system preferentially keeps the source ports unchanged. If a post-NAT port number has been used, the system randomly allocates a port number to the packet.

This function applies only to 3-Tuple NAT. By default, this function is disabled. Only the USG6000E (not including USG6510E/6510E-POE/6530E) support this parameter.

This parameter shall be configured when certain applications need to use fixed ports.

-

Views

NAT address pool view

Default Level

2: Configuration level

Usage Guidelines

If there are too many private addresses, port conflicts may occur when the private addresses are translated into public addresses for Internet access. To reduce the possibility of port conflicts, you must set the maximum number of private addresses corresponding to a public address.

After the limit is set, excess private addresses cannot be translated into public addresses for Internet access. For example, if the public address pool has 10 addresses and a public address corresponds to a maximum of 10 private addresses, when the 101st private address requests a public address for Internet access, the request packet is discarded.

This command applies only to PAT and 3-Tuple NAT modes. You can set the mode in mode.

Only the USG6510E/6510E-POE/6530E does not support this command.

Example

# Set the maximum number of private addresses corresponding to a public address to 100.

<sysname> system-view
[sysname] nat address-group 1
[sysname-address-group-1] mode pat
[sysname-address-group-1] srcip-car-num 100
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >