122
Step Command
Remarks
2.
Configure an address
group and enter its
view.
nat address-group
group-number
By default, no address group exists.
3.
Add a group member
to the address group.
address
start-address end-address
By default, no group member exists.
You can add multiple members to an
address group.
The IP addresses of the members must
not overlap.
4.
Enter interface view.
interface
interface-type
interface-number
N/A
5.
Configure outbound
dynamic NAT.
•
Configure NO-PAT:
nat outbound
[
acl-number
]
address-group
group-number
[
vpn-instance
vpn-instance-name
]
no-pat
[
reversible
]
•
Configure PAT:
nat outbound
[
acl-number
]
[
address-group
group-number
]
[
vpn-instance
vpn-instance-name
]
[
port-preserved
]
By default, outbound dynamic NAT is
not configured.
You can configure multiple outbound
dynamic NAT rules on an interface.
6.
(Optional.) Configure
the mapping behavior
for PAT.
nat mapping-behavior
endpoint-independent
[
acl
acl-number
]
The default mapping behavior is
Address and Port-Dependent
Mapping.
This command takes effect only on
outbound dynamic NAT for PAT.
Configuring inbound dynamic NAT
To implement bidirectional NAT, you must use inbound dynamic NAT with outbound dynamic NAT, NAT
Server, or outbound static NAT.
•
The source IP address of a received packet that matches the ACL permit statement is translated into
an address in the address group.
•
The keyword
add-route
enables the device to add a route automatically to the NATed address when
a packet matches an inbound dynamic NAT rule. The output interface for the automatically added
route is the NAT interface, and the next hop is the source address before translation. If you do not
specify this keyword, you must add the route manually. H3C recommends that you manually specify
a route because it takes time to add routes automatically.
•
The
reversible
keyword matches the destination IP address in the first packet from the private
network to the public network against existing NO-PAT entries, and translates the destination
address into the NAT address in a matching NO-PAT entry.
Inbound dynamic NAT does not support Easy IP.
To configure inbound dynamic NAT:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
Содержание MSR 2600 Series
Страница 6: ...We appreciate your comments...
Страница 33: ...18 AC vlan1 quit...
Страница 113: ...98 Figure 41 Creating a record d On the page that appears select IPv6 Host AAAA as the resource record type...
Страница 118: ...103...
Страница 168: ...153 H323 Enabled ICMP ERROR Enabled...
Страница 170: ...155 Task Command Display FIB entries display fib vpn instance vpn instance name ip address mask mask length...