nat port-limit enable

Function

The nat port-limit enable command enables the user-based port number limit function.

The undo nat port-limit enable command disables the user-based port number limit function.

By default, the user-based port number limit function is disabled.

This command is supported only on the NetEngine 8000 F1A.

Format

nat port-limit enable

undo nat port-limit enable

Parameters

None

Views

NAT instance view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
nat	write

Usage Guidelines

Usage Scenario

To prevent the number of connections to a CPE from exceeding the specified threshold, run the nat port-limit enable command to configure the user-based port number limit function.

Configuration Impact

After the nat port-limit enable command is run in the NAT instance view, the system limits the number of NAT ports to be allocated.

Precautions

This command can only be used with the static source tracing algorithm in the on-board NAT scenario.

Example

# Enable the port limit function on all CPEs in a NAT instance named cpe1.

<HUAWEI> system-view
[~HUAWEI] nat instance cpe1 id 1
[*HUAWEI-nat-instance-cpe1] nat port-limit enable