CTC Union SHDTU03-ET10R, Руководство пользователя

Страница: 82 / 90

Chapter 8. Configuration Commands
8-18
NAT (Network Address Translation) is the translation of an Internet Protocol address (IP address)
used within one network to a different IP address known within another network. One network is
designated the inside (private) network and the other is the outside (public) network. Typically, a
company maps its local inside network addresses to one or more global outside IP addresses and
reverse the global IP addresses of incoming packets back into local IP addresses. This ensures
security since each outgoing or incoming request must go through a translation process, that also
offers the opportunity to qualify or authenticate the request or match it to a previous request. NAT
also conserves on the number of global IP addresses that a company needs and allows the
company to use a single IP address for its communication to the Internet world.
DMZ (demilitarized zone) is a computer host or small network inserted as a “neutral zone”
between a company private network and the outside public network. It prevents outside users
from getting direct access to a server that has company private data.
NAT
You can configure NAT parameters in the nat menu.
>> virtual Virtual IP address pool
global Global IP address pool
fixed Fixed IP address mapping
The virtual menu contains a range of virtual IP address, delete virtual IP address and show virtual
IP address.
>> range Edit virtual IP address pool
delete Delete virtual IP address pool
list Show virtual IP address pool
You can create five virtual IP address pool range with the range command.
----------------------------------------------------------------------
Command: setup ip_share nat virtual range <1~5> <ip> <1~253>
Message: Please input the following information.
NAT local address range entry number <1~5>: 1
Base address: 192.168.0.2
Number of address: 49
----------------------------------------------------------------------