H3C MSR 2600 Series, Configuration Manual

Page: 147 / 288

132
[Router] nat address-group 1
# Add address 202.38.1.2 to the group.
[Router-nat-address-group-1] address 202.38.1.2 202.38.1.2
[Router-nat-address-group-1] quit
# Create address group 2.
[Router] nat address-group 2
# Add address 202.38.1.3 to the group.
[Router-nat-address-group-2] address 202.38.1.3 202.38.1.3
[Router-nat-address-group-2] quit
# Enable inbound NO-PAT on interface GigabitEthernet 1/2 to translate the source IP address in the
DNS reply payload into the address in address group 1, and allow reversible NAT.
[Router] interface gigabitethernet 1/2
[Router-GigabitEthernet1/2] nat inbound 2000 address-group 1 no-pat reversible
# Enable outbound PAT on interface GigabitEthernet 1/2 to translate the source address of outgoing
packets into the address in address group 2.
[Router-GigabitEthernet1/2] nat outbound 2000 address-group 2
[Router-GigabitEthernet1/2] quit
# Configure a static route to 202.38.1.2 with GigabitEthernet 1/2 as the output interface and 20.2.2.2
as the next hop. (The next hop address varies with network settings.)
[Router] ip route-static 202.38.1.2 32 gigabitethernet 1/2 20.2.2.2
Verifying the configuration
After completing the configurations, Host A can access the Web server by using its domain name.
# Display all NAT configuration and statistics.
[Router] display nat all
NAT address group information:
There are 2 NAT address groups.
Group Number Start Address End Address
1 202.38.1.2 202.38.1.2
2 202.38.1.3 202.38.1.3
NAT inbound information:
There are 1 NAT inbound rules.
Interface: GigabitEthernet1/2
ACL: 2000 Address group: 1 Add route: N
NO-PAT: Y Reversible: Y
NAT outbound information:
There are 1 NAT outbound rules.
Interface: GigabitEthernet1/2
ACL: 2000 Address group: 2 Port-preserved: N
NO-PAT: N Reversible: N
NAT logging:
Log enable : Disabled
Flow-begin : Disabled