Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Руководство по настройке

Страница: 98 / 366

CAUTION: Only packets routed between an inside and an outside interface are subject
to translation.
You can unmark an interface by using the no version of this command.
ip nat
■
Use to mark an IP interface as participating in NAT translation.
■
Use the keyword ( inside or outside ) to specify the side of the network on which
the interface resides.
■
Example
host (config-if) # ip nat inside
■
Use the no version to unmark the interface (the default) so that it does not
participate in NAT translation.
■
See ip nat.
Defining Static Address Translations
Static address translation establishes a one-to-one mapping between a local and
global address or local and global address/port pair. When you specify a static address
translation or address/port pair translation, you issue commands to indicate how the
translation is applied, along with more specific variables that further define the type
of translation.
CAUTION: You must mark interfaces that participate in NAT translation as on the
inside or the outside network. See “Specifying Inside and Outside Interfaces” on
page 71 for details.
Creating Static Inside Source Translations
You use the ip nat inside source static command to create static translations from
a local IP address to a global IP address, and to untranslate the destination address
when a packet returns from the outside network to the inside network. When you
configure traditional NAT (both basic NAT and NAPT), you only need to use this
command alone. However, when you configure twice NAT, you must also use “ip
nat outside source static” on page 73 .
The ip nat inside source static command creates a simple (IP address only) or
extended (IP address, port, and protocol) entry in the translation table that maps the
two addresses.
ip nat inside source static
72 ■
Defining Static Address Translations
JUNOSe 11.1.x IP Services Configuration Guide