ESR-Series. User manual
500
Step
Description
Command
Keys
15
Specify the action “translation of
source address and port” for the traffic
meeting the requirements of “match”
command.
esr(config-snat-rule)# action
source-nat { off |
pool <NAME> | netmap <ADDR/
LEN> [static] |
interface [FIRST_PORT –
LAST_PORT] }
off – translation is disabled;
pool<NAME> – name of the
pool that contains IP addresses
and/or TCP/UDP ports set;
netmap <ADDR/LEN> – subnet
IP address and mask used
during translation; static –
option for static NAT
organization.
The parameter is defined as
AAA.BBB.CCC.DDD/EE where
each part AAA-DDD takes
values of [0..255] and EE takes
values of [1..32].
interface [FIRST_PORT –
LAST_PORT] – specify the
translation to the interface IP
address. If the range of TCP/
UDP ports is additionally
specified, the translation will
occur only for the sender TCP/
UDP ports included in the
specified range.
16
Activate a configured rule.
esr(config-snat-rule)# enable
1
When using the not key, the rule will work for values which are not included in a specified profile
Each “match” command may contain “not” key. When using the key, packets that do not meet the given
requirement will fall under the rule.
You can obtain more detail information about router configuration in “CLI command reference guide”.
16.3.2 Configuration example 1
Objective:
Configure access for users in LAN 10.1.2.0/24 to public network using Source NAT function. Specify public
network address range for SNAT 100.0.0.100-100.0.0.249.
