What ACL is ACL skill

  

nat outbound [Command] nat outbound acl-number [ address-group group-number [ no-pat ] ] undo nat outbound acl-number [ address-group group-number [ no-pat ] [View] Interface view Parameters parameter-group: Specifies the address translation using the address pool. If no address pool is specified, the IP address of the interface is used as the translated address, that is, the easy ip feature. No-pat: Indicates that one-to-one address translation is used to convert only the address of the packet without using port information. Acl-number: Index of the ACL, in the range of 2000 to 3999. Advanced ACLs can be used. Group-number: Number of an already defined address pool. Description Use the nat outbound command to associate an ACL with an address pool. The address specified in the acl-number can be translated using the address pool group-number. The undo nat outbound command deletes the corresponding address. Conversion. By configuring the association between the ACL and the address pool, the source address of the data packet in the ACL is translated, and an address in the address pool is used or the IP address of the interface is used for conversion. Different address translation associations can be configured on the same interface. Use the corresponding undo command to delete the corresponding address translation association. The interface should generally be connected to the ISP and be the exit of the internal network. If the command is used without the address-group parameter, the nat outbound acl-number command is used to implement the easy-ip feature. When the address is translated, the IP address of the interface is used as the translated address, and the address is controlled by the access control list. Address translation is possible. If the interface address is directly used as the public address of the NAT, if you change the interface address, you should first use the reset nat session command to clear the original NAT address mapping entry and then access the external network. Otherwise, the original NAT entry will appear. Can not be deleted automatically, can not be deleted using the reset session command. Examples # Allow the host on the network segment 10.110.10.0/24 to perform address translation. Use the address between 202.110.10.10 and 202.110.10.12 as the translated address. Assume that the Serial 0/0/0 port is connected to the ISP.

Copyright © Windows knowledge All Rights Reserved