H3C MSR 2600 Series, Configuration Manual

Page: 155 / 288

140
# Add address 202.38.1.3 to the address group.
[Router-nat-address-group-2] address 202.38.1.3 202.38.1.3
[Router-nat-address-group-2] quit
# Configure NAT Server on interface GigabitEthernet 1/2 to allow external hosts to access the internal
DNS server by using the address 202.38.1.4.
[Router] interface gigabitethernet 1/2
[Router-GigabitEthernet1/2] nat server protocol udp global 202.38.1.4 inside 200.1.1.3
domain
# Enable outbound NO-PAT on interface GigabitEthernet 1/2 to translate IP address of the Web server
in the DNS response payload into the address in address group 1, and allow reversible NAT.
[Router-GigabitEthernet1/2] nat outbound 2000 address-group 1 no-pat reversible
# Enable inbound PAT on interface GigabitEthernet 1/2 to translate the source address of packets going
to the internal network to the address in address group 2.
[Router-GigabitEthernet1/2] nat inbound 2000 address-group 2
[Router-GigabitEthernet1/2] quit
# Configure a static route to 202.38.1.3 with GigabitEthernet 1/2 as the output interface and 20.2.2.2
as the next hop. (The next hop address varies with network settings.).
[Router] ip route-static 202.38.1.3 32 gigabitethernet1/2 20.2.2.2
Verifying the configuration
After completing the configurations, Host on the external network can use the domain name to access the
internal Web server whose address is the same as the host.
# Display all NAT configuration and statistics.
[Router] display nat all
NAT address group information:
There are 2 NAT address groups.
Group Number Start Address End Address
1 202.38.1.2 202.38.1.2
2 202.38.1.3 202.38.1.3
NAT inbound information:
There are 1 NAT inbound rules.
Interface: GigabitEthernet1/2
ACL: 2000 Address group: 2 Add route: N
NO-PAT: N Reversible: N
NAT outbound information:
There are 1 NAT outbound rules.
Interface: GigabitEthernet1/2
ACL: 2000 Address group: 1 Port-preserved: N
NO-PAT: Y Reversible: Y
NAT internal server information:
There are 1 internal servers.
Interface: GigabitEthernet1/2
Protocol: 17(UDP)
Global IP/port: 202.38.1.4/53