Motorola RFS7000 Series, Справочное руководство

Страница: 227 / 588

5-31
Usage Guidelines 1
By using the
ip access-list
parameter you enter the following contexts:
• ext-nacl — Extended ACL. For more details see Extended ACL Instance on page 14-1 .
• std-nacl — Standard ACL. For more details see Standard ACL Instance on page 15-1 .
• dhcp – DHCP Server instance. For more details see DHCP Instance on page 17-1 .
• dhcpclass – DHCP User Class instance. For more details see DHCP Class Instance on page 18-1
• Use clear command to clear the ip dhcp binding.
Network Address Translation (NAT) allows a single device to act as a gateway for internal LAN clients. It
translates the clients internal network IP adresses into the IP address of the NAT enabled device.
RFS7000 supports port NAT and static NAT.
• Static NAT allows host on a private network and is accessible through internet using public IP’s.
• Static NAT assigns a public IP to a host on a private network. It allows a host on a public network to
communicate with the host on the private network, using its public IP.
• Port NAT maps multiple local addresses to a single global address and dynamic port numbers.
Use
ip nat inside
to mark VLAN interfaces as an inside interface. The keyword
inside
defines the VLAN
interface as internal interface. This command is used in the
(config-if)
mode, check ip on page 12-9 for
more detials.
route Establish static routes.
• A.B.C.D – IP destination prefix. Adds a static route entry in the IP routing
table.
• A.B.C.D/M – IP destination prefix. Adds a static route entry in the IP
routing table.
• next hop – IP address of the next hop that is used in to reach the
destination.
routing Turn on IP routing.
ssh Secured Shell (SSH) Server.
• port– Listening port. The value can be between 0-65536.
• rsa – RSA encryption key.
• keypair-name – Configures a RSA keypair used for encryption.
• WORD – RSA keypair name.
telnet Telnet server.
• port – Value of the listening port. The value can be between 0-65535.
NOTE To delete Standard/Extended and MAC ACL use
no access-list <access-list
name>
under the Global Config mode.