Juniper JUNOSE 11.0.X IP SERVICES, Configuration Manual

Page: 103 / 366

■
When an address pool is empty, the NAT router drops the packet.
■
Access lists and pools do not have to exist when you are defining dynamic
translation rules; you may create them after you define the dynamic translations.
Creating Dynamic Inside Source Translation Rules
Use the ip nat inside source list command to create a dynamic inside source
translation rule. This command creates a translation rule that:
■
Translates inside local source addresses to inside global addresses when packets
from the inside network are routed to the outside network
■
Translates outside local source addresses to outside global addresses when
packets from the outside network are routed to the inside network.
■
Use the overload keyword to specify that the translation create NAPT entries
(protocol, port, and address) in the NAT table.
The no version of this command removes the dynamic translation rule, but does not
remove any previously created translations (resulting from the rule evaluation) from
the translation table. To remove active translations from the translation table, see
“Clearing Dynamic Translations” on page 79.
ip nat inside source list
■
Use to create dynamic translation rules that specify when to create a translation
for a source address when routing a packet from the inside network to the outside
network.
■
Example
host (config) # ip nat inside source list translation1 pool pool1
■
Use the overload keyword to specify that the translation create extended entries
(protocol, port, and address) in the translation table for NAPT.
■
Use the no version to remove the dynamic translation rule; this command does
not remove any dynamic translations from the translation table.
■
See ip nat inside source list.
Creating Dynamic Outside Source Translation Rules
Use the ip nat outside source list command to create a dynamic outside source
translation rule. This command dynamically translates outside global source addresses
to outside local addresses when packets are routed from the outside network to the
inside network (and
untranslates the destination address when a packet returns
before a translation table entry times out).
The no version of this command removes the dynamic translation rule, but does not
remove any previously created translations from the translation table. To remove
active translations from the translation table, see “Clearing Dynamic Translations”
on page 79.
Defining Dynamic Translations
■ 77
Chapter 2: Configuring NAT