Juniper JUNOSE 11.2.X IP SERVICES, Руководство по настройке

Страница: 103 / 356

Figure 6: NAPT Example
The address pool consists of three addresses (the number of addresses is small, because
NAPT is used). Addresses matching the private address spaces of the corporate and
field subnetworks are translated to global addresses from the pool through NAPT.
To configure this example:
1.
Enter the correct virtual router context.
host1(config)# virtual-router blue
2.
Mark the inside interfaces.
a. Mark the field office:
host1:blue(config)# interface serial 2/1:1/1
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
b. Mark the two corporate T-3 links:
host1:blue(config)# interface serial 1/1
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
host1:blue(config)# interface serial 1/2
host1:blue(config-interface)# ip nat inside
host1:blue(config-interface)# exit
3.
Mark the outside interface.
host1:blue(config)# interface gigabitEthernet 3/0.1
host1:blue(config-interface)# ip nat outside
host1:blue(config-interface)# exit
4.
Create a static nil-translation for the FTP server on the corporate network.
host1:blue(config)# ip nat inside source static tcp 190.22.8.18 21 190.22.8.18 21
5.
Create the address pool for dynamic translations.
host1:blue(config)# ip nat pool corpxyz 192.32.6.4 192.32.6.7 prefix-length 24
6.
Create the access list for addresses eligible for dynamic translation.
host1:blue(config)# access-list justcorp permit 10.10.1.0 0.0.0.255
77 Copyright © 2010, Juniper Networks, Inc.
Chapter 2: Configuring NAT