2033
This command allows you to log active flows regularly. This solves the problem of
logging long-last active sessions as logs are normally generated only when a
session is established or deleted.
Example # Configure the interval between sending NAT active-flow logs as 10 minutes.
<Sysname> system-view
[Sysname] nat log flow-active 10
# Delete the configured interval.
<Sysname> system-view
[Sysname] undo nat log flow-active
nat log flow-begin
Syntax nat log flow-begin
undo nat log flow-begin
View System view
Parameter None
Description Use the
nat log flow-begin command to generate NAT logs while establishing a
NAT session.
Use the
undo nat log flow-begin command to restore the default.
By default, no log is generated when establishing a session.
Example # Generate NAT log while establishing a session.
<Sysname> system-view
[Sysname] nat log flow-begin
nat outbound
Syntax nat outbound acl-number [ address-group group-number [ no-pat ]]
undo nat outbound acl-number [ address-group group-number [ no-pat ]]
View Interface view
Parameter address-group: Specifies an address pool for NAT. If no address pool is specified,
the interface IP address will be used, that is, the Easy IP feature.
acl-number: ACL (including both the basic and the advanced) number, in the
range 2,000 to 3,999.
