Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302
389
Note:
After port filtering is enabled or disabled and you apply the change, session entries are
deleted immediately.
For more information on proxy IP address, see
Client Network Address Translation (Proxy IP),
.
3. Enable active FTP NAT using the following command:
4. Apply and save the configuration.
Overlapping NAT
Alteon supports overlapping or duplicate source IP addresses on different VLANs in a source NAT
filter. This is done by extending the session table lookup algorithm to include the session VLAN.
When there is an overlapping source IP address for different VLANs, Alteon creates different
sessions. For the source NAT, Alteon substitutes the source IP address with the configured proxy IP
address. A proxy IP address for the VLAN must be configured for this to function properly.
When there is an overlapping NAT, Alteon does not use the routing table to route the packet back to
the sender in Layer 3 mode, due to the overlapping source address. Instead, Alteon uses the VLAN
gateway to forward the packet back to the sender. While VLAN gateway configuration is necessary to
make this feature function properly, Layer 2 mode is also supported.
>> Filter 14# sip any
(From any source IP address)
>> Filter 14# action nat
(Perform NAT on matching traffic)
>> Filter 14# nat source
(Translate source information)
>> Filter 14# ena
(Enable the filter)
>> Filter 14# adv/proxyadv/proxy enable
(Allow proxy IP translation)
>> Filter 14
Proxy Advanced# proxyip
205.178.17.12
(Set the filter's proxy IP address)
>> Proxy IP Address# /cfg/slb/port 1
(Select SLB port 1)
>> SLB port 1# add 14
(Add the filter to port 1)
>> SLB port 1# filt enable
(Enable filtering on port 1)
>> SLB port 1# proxy ena
(Enable proxies on this port)
>> SLB port 1# apply
(Apply configuration changes)
>> SLB port 1# save
(Save configuration changes)
>> # /cfg/slb/filt <filter number> /adv/layer7/ftpa ena
