User Manual

384
Users Manual of XGS-6350-24X4C
ip nat inside
Label the interface as one to connect the inside
network.
interface type number
Specify the outside interface.
ip nat outside
Label the interface as one to connect the outside
interface.
Only those transferable addresses can be contained in the access list (remember
that an implicit item “deny all” exists at the end of each access list). The random
access list may lead to unexpected results.
For details, refer to section “TCP Load Configuration Example”.
43.2.3.5 Changing Translation Timeout Time and Limiting the Number of Connections
After a period of leisure, the dynamic Network Address Translation (NAT) is to time out by default. If the
reloading is not configured, the simple translation item is to time out after one hour. You can run the following
command to in global configuration mode to change the timeout value.
Run... To...
ip nat translation timeoutseconds
Change the timeout value of the
dynamic NAT without reloading.
If the reloading is configured, the translation timeout will be better controlled because every translation item
contains more contents. To change the timeout value of the expansible item, run one or most of the following
commands in global configuration mode.
Run... To...
ip nat translation udp-timeout
seconds
Change the UDP timeout value (the
default value is five seconds).
ip nat translation
dns-timeoutseconds
Change the DNS timeout value (the
default value is one second).
ip nat translation tcp-timeout
seconds
Change the TCP timeout value (the
default value is one hour).
ip nat translation
icmp-timeoutseconds
Set the timeout time of the ICMP NAT
(the default time is 60 seconds).
ip nat translation
syn-timeoutseconds
Set the timeout time of the NAT in the
TCP SYN state (the default time is 60
seconds).
ip nat translation finrst-timeout
seconds
Change the TCP FIN/RST timeout
value (the default value is 60 seconds).
There are three methods to limit the NAT connections. Run the following commands in global configuration
mode to realize the three methods.