host1:blue(config)#
access-list justcorp permit 10.10.2.0 0.0.0.255
7.
Create the NAPT dynamic translation rule.
host1:blue(config)#
ip nat inside source list justcorp pool corpxyz overload
8.
Configure a default route to the outside interface.
host1:blue(config)#
ip route 0.0.0.0 0.0.0.0 gigabitEthernet 3/0.1
9.
Configure a null route for the inside global addresses to prevent routing loops when
no matching translation exists.
host1:blue(config)#
ip route 192.32.6.0 255.255.255.248 null 0
NOTE:
Null route applies to 192.32.6.0–192.32.6.3, which do not exist in the address
pool
All hosts that use private addresses in both the field office and the corporate office must
have their addresses translated to one of the three addresses in the pool. Because this
example uses NAPT, the interface can use only one pool address, depending on the
number of inside hosts attempting to access the outside at any given time.
Bidirectional NAT Example
Figure 7 on page 78 illustrates how outside hosts can initiate conversations with inside
hosts through the use of a DNS server that resides on the inside network.
The inside realm uses basic NAT. The inside network uses a mix of private subnetwork
address space (192.168.22/24) and registered public addresses.
Figure 7: Bidirectional NAT Example
To configure this example:
1.
Enter the correct virtual router context.
host1(config)#
virtual-router blue
2.
Mark the inside interface.
host1:blue(config)#
interface serial 1/1:1/1
host1:blue(config-interface)#
ip nat inside
host1:blue(config-interface)#
exit
Copyright © 2010, Juniper Networks, Inc.
78
JunosE 11.2.x IP Services Configuration Guide
Содержание JUNOSE 11.2.X IP SERVICES
Страница 6: ...Copyright 2010 Juniper Networks Inc vi...
Страница 8: ...Copyright 2010 Juniper Networks Inc viii JunosE 11 2 x IP Services Configuration Guide...
Страница 18: ...Copyright 2010 Juniper Networks Inc xviii JunosE 11 2 x IP Services Configuration Guide...
Страница 22: ...Copyright 2010 Juniper Networks Inc xxii JunosE 11 2 x IP Services Configuration Guide...
Страница 28: ...Copyright 2010 Juniper Networks Inc 2 JunosE 11 2 x IP Services Configuration Guide...
Страница 116: ...Copyright 2010 Juniper Networks Inc 90 JunosE 11 2 x IP Services Configuration Guide...
Страница 144: ...Copyright 2010 Juniper Networks Inc 118 JunosE 11 2 x IP Services Configuration Guide...
Страница 230: ...Copyright 2010 Juniper Networks Inc 204 JunosE 11 2 x IP Services Configuration Guide...
Страница 262: ...Copyright 2010 Juniper Networks Inc 236 JunosE 11 2 x IP Services Configuration Guide...
Страница 294: ...Copyright 2010 Juniper Networks Inc 268 JunosE 11 2 x IP Services Configuration Guide...
Страница 328: ...Copyright 2010 Juniper Networks Inc 302 JunosE 11 2 x IP Services Configuration Guide...
Страница 345: ...PART 2 Index Index on page 321 319 Copyright 2010 Juniper Networks Inc...
Страница 346: ...Copyright 2010 Juniper Networks Inc 320 JunosE 11 2 x IP Services Configuration Guide...
Страница 356: ...Copyright 2010 Juniper Networks Inc 330 JunosE 11 2 x IP Services Configuration Guide...