123
Step Command
Remarks
2.
Configure an address
group and enter its view.
nat address-group
group-number
By default, no address group exists.
3.
Add a group member to
the address group.
address
start-address end-address
By default, no group member exists.
You can add multiple members to an
address group.
The IP addresses of the members must
not overlap.
4.
Enter interface view.
interface
interface-type
interface-number
N/A
5.
Configure inbound
dynamic NAT.
nat inbound
acl-number
address-group
group-number
[
vpn-instance
vpn-instance-name
]
[
no-pat
[
reversible
] [
add-route
]
By default, inbound dynamic NAT is
not configured.
Configuring NAT Server
Configuring NAT Server is to map an external IP address and port number to the real IP address and port
number of an internal server on the interface that connects the external network.
An internal server can be located in a common private network or an MPLS L3VPN.
If you specify the
acl
keyword for the NAT Server configuration, only packets matching the ACL permit
rule are translated. NAT uses only the match criteria of the source IP address, source port number,
destination IP address, destination port number, transport layer protocol, and VPN instance in the ACL
rule for packet matching.
Configuring common NAT Server
Map the real private IP address and port number of an internal server to a public IP address and port
number so that hosts in external networks can access the internal server.
To configure common NAT Server:
Step Command
Remarks
1.
Enter system
view.
system-view
N/A
2.
Enter interface
view.
interface
interface-type interface-number
N/A
Summary of Contents for MSR 2600 Series
Page 6: ...We appreciate your comments...
Page 33: ...18 AC vlan1 quit...
Page 118: ...103...
