Configuring port mapping
Two mapping mechanisms exist: general port mapping and basic ACL–based host port mapping.
General port mapping—Refers to a mapping of a user-defined port number to an application layer protocol. If port 8080 is mapped to HTTP, for example, all TCP packets the destination port of which is port 8080 are regarded as HTTP packets.
Host port mapping—Refers to a mapping of a user-defined port number to an application layer protocol for packets to some specific hosts. For example, you can establish a host port mapping so that all TCP packets using port 8080 sent to the network segment 10.110.0.0 are regarded as HTTP packets. The address range of hosts can be specified by means of a basic ACL.
To configure port mapping:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure mapping between the port and the application protocol. | port-mapping application-name port port-number [ acl acl-number ] | Not configured by default. The application layer protocols supported by this function include FTP, H323, HTTP, HTTPS, IKE, RTSP, SMTP, SSH, and VAM. |