Command Reference Guide
3Com Router 5000 Family and Router 6000 Family nat server ● 225
Command Reference
host-addr
IP address of the server in internal LAN.
host-port
Service port number provided for a server in the range
of 0 to 65535, and the common used port numbers
are replaced by key words. For example, www service
port number is 80, which can also be represented by
www. ftp service port number is 21, and ftp can also
stands for it. If the
inside-port is 0, it indicates that
all the types of services can be provided and the key
word any can be used to stand for it in this situation. If
the parameter is not configured, it is considered as the
case of any, which is the same as that there is a static
connection between
global-addr and
host-addr
. When the host-port is configured as
any, the
global-port also should be any, otherwise
the configuration is illegal.
global-port1, global-port2
Specifies a port range through two port numbers,
forming a corresponding relation with the internal host
address range.
global-port2 must be larger than
global-port1.
host-addr1, host-addr2
Defines a group of consecutive address ranges, which
respectively one-to-one matches the port ranges
defined above.
host-addr2 must be bigger than
host-addr1. The number of the address ranges
should be the same as the number of ports defined by
global-port1 and global-port2.
pro-type
The protocol type carried by IP, possibly being a
protocol ID, or a key word as a substitution. For
example: icmp (its protocol ID is 1), tcp (its protocol ID
is 6), udp (its protocol ID is 17).
Example Specify the IP address of the interior www server of the LAN as 10.110.10.10, the IP
address of the interior ftp server as 10.110.10.11. It is expected that the outside can
access WEB through http:// 202.110.10.10:8080 and connect FTP web site through
ftp://202.110.10.10. Suppose that Serial0/0/0 is connected to ISP.
[3Com-Serial0/0/0] nat server protocol tcp global 202.110.10.10 8080
inside 10.110.10.10 www
[3Com] ip vpn-instance vrf10
[3Com-vpn-instance] route-distinguisher 100:001
[3Com-Serial0/0/0] nat server protocol tcp global 202.110.10.10 inside
10.110.10.11 ftp
Specify one interior host 10.110.10.12, expecting that the host of the exterior
network can ping it with ping 202.110.10.11 command.
[3Com-Serial0/0/0] nat server protocol icmp global 202.110.10.11 inside
10.110.10.12
Delete the www server.
[3Com-Serial0/0/0] undo nat server protocol tcp global 202.110.10.10
8070 inside 10.110.10.10 www
By the command below, the internal ftp server of VPN vrf10 can be removed.