Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 659 / 1193

Destination NAT Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
633
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
Note: Currently, multiple match-lists cannot be associated to a firewall policy rule for NAT. To
configure more than one match-list within a firewall policy, add multiple rules with
different match-lists.
If a DNAT policy with the pool configuration is attached to an interface, and at any
given point of time, the list is modified, you need to reapply the NAT policy on the
interface.
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91
ALU(config-nat-N2)# match m1 destination-nat pool l1
T
O
C
ONFIGURE
P
ORT
N
UMBER FOR
DNAT
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91
port 100
ALU(config-nat-N2)# match m1 destination-nat pool l1 port 100
T
O
C
ONFIGURE
S
TATIC
DNAT
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat pool l1 static
Command (in NCM) Description
[ <1-65535> ] match [{ all | any }]
< match-list name> destination-
nat { host { <ip-address|host-
name> }| pool <list-name> } port
< 1-65535 >
This command is used to configure
port number for a DNAT.
Command (in NCM) Description
[ <1-65535> ] match [{ all | any }]
< match-list name> destination-
nat pool <list-name> static
This command is used to configure a
static DNAT that uses one-to-one
address mapping without port
translation.