Network Address Translation
December 2000
20 - 5
NOTE:
You must configure inside NAT on one interface and outside NAT on another interface. The device
performs NAT for traffic between the interfaces.
In addition to the tasks listed above, you can modify the age timers for the address translation entries the device
creates. See “Changing Translation Table Timeouts” on page 20-7 for information. For information about viewing
the active NAT translations, see “Displaying the Active NAT Translations” on page 20-8.
The following sections provide procedures for configuring NAT.
Configuring Static Address Translations
Use the following CLI method to configure static NAT.
NOTE:
NAT supports translation of private (inside) addresses into global (outside) addresses only. Translation
of global addresses into private addresses is not supported.
USING THE CLI
To configure static NAT for an IP address, enter commands such as the following:
BigIron(config)# ip nat inside source static 10.10.10.69 209.157.1.69
The commands in this example statically map the private address 10.10.10.69 to the Internet address
209.157.1.69.
Syntax:
[no] ip nat inside source static <private-ip> <global-ip>
This command associates a specific private address with a specific Internet address. Use this command when
you want to ensure that the specified addresses are always mapped together.
The
inside source
parameter specifies that the mapping applies to the private address sending traffic to the
Internet.
The <private-ip> parameter specifies the private IP address.
The <global-ip> parameter specifies the Internet address. The device supports up to 256 global IP addresses.
Neither of the IP address parameters needs a network mask.
Configuring Dynamic NAT Parameters
To configure dynamic NAT:
•
Configure a standard or extended ACL for each private address range.
•
Configure a pool for each consecutive range of Internet addresses.
•
Associate private addresses (ACLs) with pools.
•
Optionally, enable the Port Address Translation feature.
Use the following CLI method to configure dynamic NAT.
USING THE CLI
You can configure dynamic NAT with the Port Address Translation feature disabled or enabled.
Example with Port Address Translation Disabled
To configure dynamic NAT with the Port Address Translation feature disabled, enter commands such as the
following at the global CONFIG level of the CLI:
BigIron(config)# access-list 1 permit 10.10.10.0/24
BigIron(config)# ip nat pool OutAdds 209.157.1.2 209.157.1.254 prefix-length 24
BigIron(config)# ip nat inside source list 1 pool OutAdds
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...