ESR service routers. ESR-Series. Functionality description. Version 1.12.0
370
Configure Static NAT service in SNAT configuration mode. In the set attributes, specify that the rules are
applying only to packets transferred to public network through te1/0/1 port. The rules include data source
address test for belonging to “LOCAL_NET” pool and destination addresses test for belonging to
“PUBLIC_POOL” pool.
esr(config)# nat source
esr(config-snat)# ruleset SNAT
esr(config-snat-ruleset)# to
interface
te1/
0
/
1
esr(config-snat-ruleset)# rule
1
esr(config-snat-rule)# match source-address LOCAL_NET
esr(config-snat-rule)# match destination-address PUBLIC_POOL
esr(config-snat-rule)# action source-nat netmap
200.10
.
0.0
/
24
static
esr(config-snat-rule)# enable
esr(config-snat-rule)# exit
esr(config-snat-ruleset)# exit
In order the router could response to the ARP requests for addresses from the “PROXY” translation pool, you
should launch ARP Proxy service. ARP Proxy service is configured on the interface that IP address from
'PROXY' address profile subnet belongs to:
esr(config)#
interface
tengigabitethernet
1
/
0
/
1
esr(config-
if
-te)# ip nat proxy-arp PROXY
To enable 200.10.0.0/24 network access for LAN devices, they should be configured for routing – 21.12.2.1
should be defined as a gateway address.
The configuration changes come into effect after applying the following commands:
esr# commit
Configuration has been successfully committed
esr# confirm
Configuration has been successfully confirmed
You can display active translations by using the following command:
esr# show ip nat translations
10.5 HTTP/HTTPS traffic proxying
10.5.1 Configuration algorithm
Step
Description
Command
Keys
1
Create an object with a URL
esr(config)# object-
group url <NAME>
2
Specify the set
esr(config-object-
group-url)# url <URL>
<URL>
–
web page, site address.
3
Create proxy profile
esr(config)# ip http
profile <NAME>
<NAME>
–
profile name.
