Ericsson HM4x0, Справочное руководство

Страница: 343 / 702

NAT CLI Commands
2/1553-ZAT 759 94 Uen B – December 2005
343
Option Description Default value
name An arbitrary name that identifies a
global network address or pool of
addresses. It can be made up of one
or more letters or a combination of
letters and digits, but it cannot start
with a digit. N/A
interfacename The name of an existing security
interface (external or DMZ) created
and connected to an inside interface
(DMZ or internal) using the
nat
enable
command. To display
security interfaces, use the
security list interfaces
command.
N/A
internal Maps the IP addresses to the
internal interface type inside the
network. N/A
dmz Maps the global addresses to the
DMZ interface type inside the
network. N/A
ipaddress The IP address of the interfacename
that is visible outside the network.
N/A
mask The subnet mask of the network IP
address. N/A
endaddress The last IP address in the range of
addresses that make up the global
address pool. N/A
14.4.4 Example
Example 1:
This example creates a network address pool that allows NAT to translate
packets between the external interface and the DMZ interface type.
First, NAT is enabled between the external interface and the DMZ interface
type:
--> nat enable n1 extinterface dmz
Then the IP address and subnet mask is created: