Figure 11: PPTP Tunnels on an Outside Network
The router has installed an inside source static simple translation in its translation table
as follows:
Inside Global Address
Inside Local Address
20.0.0.1
11.11.11.1
The PPTP client initiates its tunnels to the inside global address 20.0.0.1. The E Series
router translates packets destined for address 20.0.0.1 and forwards them to the inside
local address of 11.11.11.1. Because GRE traffic can pass through NAT, all matching PPTP
control packets are translated and forwarded to the destination.
GRE Flows Through NAT
Because PPTP requires the use of GRE flows, the examples in the previous section also
work for any GRE traffic flows that traverse NAT.
GRE flows can terminate at an E Series router if NAT is or is not enabled. When the router
receives locally terminating inbound GRE packets, the router transmits the packets to
the tunnel server module for GRE processing. If the packets require translating, they are
again sent through the tunnel server module.
NOTE:
Only inner IP headers are translated for terminating GRE flows; outer IP headers
are never translated.
For outbound GRE packets, the process works in reverse. If the packets require translation,
the router transmits the packets to the tunnel server module for translation. If the packets
are destined for a GRE tunnel, they are again sent through the tunnel server module where
an outer header is prepended to the packet and the packet is then sent to the appropriate
GRE tunnel.
Monitoring NAT
This section explains how to view NAT license information, NAT statistics, NAT translation
entries, NAT address pool information, and NAT inside and outside rule settings.
Displaying the NAT License Key
The
show license nat
command displays the NAT license key.
Copyright © 2010, Juniper Networks, Inc.
84
JunosE 11.2.x IP Services Configuration Guide
Содержание JUNOSE 11.2.X IP SERVICES
Страница 6: ...Copyright 2010 Juniper Networks Inc vi...
Страница 8: ...Copyright 2010 Juniper Networks Inc viii JunosE 11 2 x IP Services Configuration Guide...
Страница 18: ...Copyright 2010 Juniper Networks Inc xviii JunosE 11 2 x IP Services Configuration Guide...
Страница 22: ...Copyright 2010 Juniper Networks Inc xxii JunosE 11 2 x IP Services Configuration Guide...
Страница 28: ...Copyright 2010 Juniper Networks Inc 2 JunosE 11 2 x IP Services Configuration Guide...
Страница 116: ...Copyright 2010 Juniper Networks Inc 90 JunosE 11 2 x IP Services Configuration Guide...
Страница 144: ...Copyright 2010 Juniper Networks Inc 118 JunosE 11 2 x IP Services Configuration Guide...
Страница 230: ...Copyright 2010 Juniper Networks Inc 204 JunosE 11 2 x IP Services Configuration Guide...
Страница 262: ...Copyright 2010 Juniper Networks Inc 236 JunosE 11 2 x IP Services Configuration Guide...
Страница 294: ...Copyright 2010 Juniper Networks Inc 268 JunosE 11 2 x IP Services Configuration Guide...
Страница 328: ...Copyright 2010 Juniper Networks Inc 302 JunosE 11 2 x IP Services Configuration Guide...
Страница 345: ...PART 2 Index Index on page 321 319 Copyright 2010 Juniper Networks Inc...
Страница 346: ...Copyright 2010 Juniper Networks Inc 320 JunosE 11 2 x IP Services Configuration Guide...
Страница 356: ...Copyright 2010 Juniper Networks Inc 330 JunosE 11 2 x IP Services Configuration Guide...