Juniper JUNOSE 11.0.X IP SERVICES, Configuration Manual

Page: 106 / 366

Both offices use private addresses. The corporate office has a dual T-3 link and a
public FTP server that has a global address (that is, it does not need translation).
Figure 6: NAPT Example
The address pool consists of three addresses (the number of addresses is small,
because NAPT is used). Addresses matching the private address spaces of the
corporate and field subnetworks are translated to global addresses from the pool
through NAPT.
To configure this example:
1.
Enter the correct virtual router context.
host1(config)# virtual-router blue
2.
Mark the inside interfaces.
a. Mark the field office:
host1:blue(config)# interface serial 2/1:1/1
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
b. Mark the two corporate T-3 links:
host1:blue(config)# interface serial 1/1
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
host1:blue(config)# interface serial 1/2
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
3.
Mark the outside interface.
host1:blue(config)# interface gigabitEthernet 3/0.1
host1:blue(config-interface)# ip nat outside
host1:blue(config-interface)# exit
4.
Create a static nil-translation for the FTP server on the corporate network.
80 ■
NAT Configuration Examples
JUNOSe 11.0.x IP Services Configuration Guide