Operation Manual – NAT, Netstream, Policy RoutingH3C S7500 Series Ethernet Switches Chapter 1 NAT Configuration1-8III. Configuring the Easy IP featureYou can enable the Easy IP feature by using the nat outbound command without theaddress-group keyword. After that, when performing address translation, the systemwill use the IP address of the VLAN interface as the translated source address. TheACL specified in the command can be used to limit the internal addresses allowed forNAT.Follow these steps to configure the Easy IP feature:To do… Use the command… RemarksEnter system view system-view —Enter VLAN interface view interface Vlan-interface vlan-id —Configure the NAT EasyIP featurenat outbound acl-number slotslot-number RequiredCaution:z For NAT function, basic ACL (2000 to 2999) supports only source IP address as thefiltering item, advanced ACL (3000 to 3999) supports both source IP address anddestination IP address as filtering items. Other ACL filtering items are not supportedcurrently.z After an ACL is configured with the nat outbound command, modifications to theACL (adding/deleting a rule) are invalid.z All ACLs configured for a VLAN interface with the nat outbound command can onlybe configured on the same LPU.z If multiple ACL rules are configured for a VLAN interface with the nat outboundcommand, The ACL rules will be matched in the following precedence order: Forrules in different ACLs, the rules with larger ACL numbers take precedence overthose with smaller ACL numbers. For rules in a same ACL, the rules configuredearlier take precedence over those configured later.1.3.4 Configuring Internal ServerBy configuring internal servers with the nat server command, you can map externaladdresses and ports to internal servers, so as to enable external hosts to accessinternal servers. When using the nat server command, the information you need toinput includes: external address and port, internal address and port of internal server,and protocol type.Follow these steps to configure internal server(s):
