User's Manual

405
Users Manual of CS-6306R
Run... To...
ip nat pool name start-ip end-ip
netmask
Define an address pool containing the addresses
of real hosts.
ip access-list standard
access-list-name permit source
[source-mask]
Define an access table permitting addresses of
virtual hosts.
ip nat inside destination list
access-list-name pool name
Create a dynamic inside target transfer
mechanism and confirm the previously defined
access list.
interface type number
Specify the inside interface.
ip nat inside
Label the interface as one to connect the inside
network.
interface type number
Specify the outside interface.
ip nat outside
Label the interface as one to connect the outside
interface.
Only those transferable addresses can be contained in the access list (remember
that an implicit item “deny all” exists at the end of each access list). The random
access list may lead to unexpected results.
For details, refer to section “TCP Load Configuration Example”.
43.2.3.5 Changing Translation Timeout Time and Limiting the Number of Connections
After a period of leisure, the dynamic Network Address Translation (NAT) is to time out by default. If the
reloading is not configured, the simple translation item is to time out after one hour. You can run the following
command to in global configuration mode to change the timeout value.
Run... To...
ip nat translation timeoutseconds
Change the timeout value of the
dynamic NAT without reloading.
If the reloading is configured, the translation timeout will be better controlled because every translation item
contains more contents. To change the timeout value of the expansible item, run one or most of the following
commands in global configuration mode.
Run... To...
ip nat translation udp-timeout
seconds
Change the UDP timeout value (the
default value is five seconds).
ip nat translation
dns-timeoutseconds
Change the DNS timeout value (the
default value is one second).
ip nat translation tcp-timeout
seconds
Change the TCP timeout value (the
default value is one hour).