Juniper JUNOSE 11.2.X IP SERVICES, Руководство по настройке

Страница: 99 / 356

are not allocated from an address pool, even if they are included in an address pool
range.
• You cannot remove an address pool if the pool is part of a translation rule or if any of
the ranges within the pool are still in use. You must issue the
clear ip nat translation
command to clear any ranges before you can remove the pool to which they apply.
address
•
Use to specify a range of IP addresses in config-ipnat-pool mode; you can repeat the
address command to create multiple ranges.
•
Example
host (config-ipnat-pool)# address 171.69.40.110 171.69.40.115
•
Use the no version to remove the range for the current address pool.
•
See address.
ip nat pool
•
Use to create address pools.
•
Example 1—Creating a single, continuous range
host (config) # ip nat pool singlerange 171.69.40.1 171.69.40.100 prefix-length 30
•
Example 2—Creating multiple, discontinuous ranges
host (config) # ip nat pool multiplerange prefix-length 30
host (config-ipnat-pool)# address 171.69.40.110 171.69.40.112
host (config-ipnat-pool)# address 171.69.40.118 171.69.40.120
host (config-ipnat-pool)# exit
•
Use the no version to remove the address range.
•
See ip nat pool.
Defining Dynamic Translation Rules
You can use the CLI to define dynamic translation rules for inside and outside sources.
CAUTION: You must mark interfaces that participate in NAT translation as on the inside
or the outside network. See “Specifying Inside and Outside Interfaces” on page 69 for
details.
You can create a dynamic translation rule to configure inside source or outside source
translation. If the NAT router cannot locate a matching entry in its translation database
for a given packet, it evaluates the access list of all applicable dynamic translation rules
(inside source translation rules for outbound packets and outside source translation rules
for inbound packets) against the packet. If an access list permits translation, the NAT
router tries to allocate an address from the associated address pool to install a new
translation.
When you create dynamic translation rules, keep the following in mind:
73 Copyright © 2010, Juniper Networks, Inc.
Chapter 2: Configuring NAT