Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 642 / 1193

Network Address Translation
Left running head:
Chapter name (automatic)
616
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
B
ENEFITS OF
NAT
•
Connection to the Internet: NAT is a method of connecting multiple computers to
the Internet (or any other IP network) using one IP address.
•
Transparent Proxying.
•
Security considerations: NAT automatically provides firewall-style protection
without any special setup.
•
Traffic logging: Since all the traffic to and from the Internet has to pass through a
NAT gateway, it can record all the traffic to a log file.
•
Ease and flexibility of network administration: The smaller parts expose only one
IP address to the outside, which means that computers can be added or removed,
or their addresses changed, without impacting external networks.
B
EFORE
Y
OU
C
ONFIGURE
NAT
1. Before you configure NAT, you must decide whether NAT has to be configured on
an internal or external interface.
2. You should also be sure that you have a basic understanding of the IP protocol,
port numbers, host address mapping; specifically, you should know how to
configure dynamic NATs.
3. Configure the common classifiers to decide on the match-list.(Refer to the
“Common Classifiers” of this guide, to configure the match-lists).
A
LCATEL
-L
UCENT
S
PECIFIC
O
VERVIEW
•
In OA-700, NAT is applied to an interface.
•
Configuration allows for load-balancing in DNAT if a pool of IP addresses are
used.
•
Port ranges used for translation can be explicitly specified.
•
Command " ip nat name " enters the sub-configuration mode. Hence, you can
have multiple match-lists with different NAT IP pool or host address.
•
In OA-700, the default for NAT configuration is dynamic mapping. The keyword
“
static ” has to be used to convert this setting to static.
•
OA-700 supports reflexive/stateful inspection.
•
For Source NAT, if no IP pool or host address is specified, the default is the box's
IP address of the egress interface on which the NAT policy is applied.