Juniper JUNOSE 11.2.X IP SERVICES, Руководство по настройке

Страница: 100 / 356

•
You can associate a list with one pool at any given time. Associating a list with a different
pool replaces the previous association.
• The optional overload keyword for inside source translation specifies that the router
employ NAPT.
•
You can configure dynamic NAPT for inside source translation only; you cannot configure
dynamic NAPT for outside source translation.
• When no match occurs for any dynamic translation rule, the NAT router does not
translate the packet.
•
When an address pool is empty, the NAT router drops the packet.
• Access lists and pools do not have to exist when you are defining dynamic translation
rules; you may create them after you define the dynamic translations.
Creating Dynamic Inside Source Translation Rules
Use the ip nat inside source list command to create a dynamic inside source translation
rule. This command creates a translation rule that:
•
Translates inside local source addresses to inside global addresses when packets from
the inside network are routed to the outside network
• Translates outside local source addresses to outside global addresses when packets
from the outside network are routed to the inside network.
•
Use the overload keyword to specify that the translation create NAPT entries (protocol,
port, and address) in the NAT table.
The no version of this command removes the dynamic translation rule, but does not
remove any previously created translations (resulting from the rule evaluation) from the
translation table. To remove active translations from the translation table, see “Clearing
Dynamic Translations” on page 76.
ip nat inside source list
•
Use to create dynamic translation rules that specify when to create a translation for
a source address when routing a packet from the inside network to the outside network.
•
Example
host (config) # ip nat inside source list translation1 pool pool1
•
Use the overload keyword to specify that the translation create extended entries
(protocol, port, and address) in the translation table for NAPT.
•
Use the no version to remove the dynamic translation rule; this command does not
remove any dynamic translations from the translation table.
•
See ip nat inside source list.
Creating Dynamic Outside Source Translation Rules
Use the ip nat outside source list command to create a dynamic outside source translation
rule. This command dynamically translates outside global source addresses to outside
local addresses when packets are routed from the outside network to the inside network
Copyright © 2010, Juniper Networks, Inc. 74
JunosE 11.2.x IP Services Configuration Guide