Radware Alteon, Инструкция по применению

Страница: 387 / 842

Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302
387
This example requires a NAT filter to be configured on the port that is connected to the internal
clients. When the NAT filter is triggered by outbound client traffic, the internal private IP address
information on the outbound packets is translated to a valid, publicly advertised IP address on
Alteon. In addition, the public IP address must be configured as a proxy IP address on the Alteon
port that is connected to the internal clients. The proxy performs the reverse translation, restoring
the private network addresses on inbound packets.
To configure dynamic NAT
For more information on proxy IP address, see Client Network Address Translation (Proxy IP),
page 190 .
Notes
• The invert option in this example filter makes this specific configuration easier, but is not a
requirement for dynamic NAT.
• Filters for dynamic NAT should be given a higher numbers than any static NAT filters (see Static
NAT, page 384
).
• After port filtering is enabled or disabled and you apply the change, session entries are deleted
immediately.
>> # /cfg/slb/filt 14
(Select the menu for client filter)
>> Filter 14# invert ena
(Invert the filter logic)
>> Filter 14# dip 10.10.10.0
(If the destination is not private)
>> Filter 14# dmask 255.255.255.0
(For the entire private subnet range)
>> Filter 14# sip any
(From any source IP address)
>> Filter 14# action nat
(Perform NAT on matching traffic)
>> Filter 14# nat source
(Translate source information)
>> Filter 14# ena
(Enable the filter)
>> Filter 14# adv/proxyadv/proxy enable
(Enable client proxy on this filter)
>> Filter 14 Proxy Advanced# proxyip
205.178.17.12
(Set the filter's proxy IP address)
>> Filter 14 Advanced# /cfg/slb/port 1
(Select SLB port 1)
>> SLB port 1# add 14
(Add the filter 14 to port 1)
>> SLB port 1# filt enable
(Enable filtering on port 1)
>> SLB port 1# proxy ena
(Enable proxies on this port)
>> SLB port 1# apply
(Apply configuration changes)
>> SLB port 1# save
(Save configuration changes)