3Com MSR 50 Series, Configuration Manual

Page: 1818 / 2443

1818 C
HAPTER
96: NAT C
ONFIGURATION
Configuring Internal
Server
Introduction to Internal
Server
To configure an internal server, you need to map an external IP address and port to
the internal server. This is done through the
nat server command.
Internal server configurations include: external IP address, external port, internal
server IP address, internal server port, and internal server protocol type.
If an internal server belongs to an MPLS VPN instance, you should specify the
vpn-instance-name argument. With this argument not provided, the internal
server is considered belonging to a private network.
Configuring an Internal
Server
Follow the following steps to configure an internal server:
c
CAUTION: Depending on device models, you may use an interface address of a
device as the public address of the internal server, namely, Easy IP. Note that this
interface must be an existing loopback interface configured with an IP address;
otherwise, the configurations to the internal server do not take effect.
Configuring NAT Log
Introduction to NAT Log NAT log is a type of system information generated by the NAT gateway during the
IP address translation. NAT log contains such information as the packet’s source IP
address, source port address, destination IP address, destination port address,
translated source IP address, translated source port address and other user
operations. The log only traces operations of private network users in accessing an
external network, not those in the opposite direction.
As multiple private users share one public IP address when accessing an external
network through a NAT gateway, it is hard to identify each of the users. The log
Enable NAPT and associate an ACL with an
IP address pool to translate both IP address
and port number. nat outbound acl-number
address-group
group-number
Required
To do... Use the command... Remarks
To do... Use the command... Remarks
Enter system view system-view -
Enter interface view interface interface-type interface-number -
Configure an internal
server nat server [ vpn-instance vpn-instance-name ]
protocol pro-type global { global-address |
interface { interface-type interface-number } |
current-interface } [ global-port ] inside
host-address [ host-port ]
Use either
command
nat server [ vpn-instance vpn-instance-name ]
protocol pro-type global { global-address |
interface { interface-type interface-number } |
current-interface } global-port1 global-port2 inside
host-address1 host-address2 host-port