Technical data
ServerIron ADX NAT64 Configuration Guide 115
53-1002444-02
Configuring NAT
7
DRAFT: BROCADE CONFIDENTIAL
FIGURE 19 Dynamic NAT translating inside host addresses to a pool of global addresses
In the example shown in Figure 19, the ServerIron ADX is acting as a gateway between the private
network and the Internet. The private network—also referred to as the inside network—consists of
IP addresses in the range 20.20.0.0 through 20.20.255.254, with a 16-bit subnet mask. A pool of
global IP addresses in the range of 15.15.15.15 through 15.15.15.25 is configured on the
ServerIron ADX, which is used to translate the private network.
1. Identify internal and external interfaces on the ServerIron ADX and assign IP addresses to
them. In this example, interfaces 1/5 and 1/1 are configured as inside and outside interfaces
respectively as shown:
ServerIronADX(config)# interface ethernet 1/5
ServerIronADX(config-if-e1000-1/5) ip address 20.20.50.1 255.255.0.0
ServerIronADX(config-if-e1000-1/5) ip nat inside
ServerIronADX(config)# interface ethernet 1/1
ServerIronADX(config-if-e1000-1/1) ip address 30.30.0.1 255.255.0.0
ServerIronADX(config-if-e1000-1/1) ip nat outside
2. Configure an access list to permit traffic from inside hosts in the 20.20.0.0 network as shown.
ServerIronADX(config)# access-list 1 permit 20.20.0.0 0.0.255.255
3. Create a pool of global IP addresses from 15.15.15.15 to 15.15.15.25, named p1.
ServerIronADX(config)# ip nat pool p1 15.15.15.15 15.15.15.25 prefix-len 24
4. Bind the inside source access list 1 to the public address pool p1 and enable PAT (overload).
ServerIronADX(config)# ip nat inside source list 1 pool p1 overload
5. You may log into the barrel processor (BP) using the rconsole and verify that the translation is
working correctly. Enter commands like those in the following example.
ServerIronADX# rconsole 1/1
ServerIronADX1/1# show ip nat statistic
ServerIronADX1/1# show ip nat translation
Remote Server
Internet
Global IP address pool: 15.15.15.15 to 15.15.15.25
Inside Interface
Outside Interface
Inside IP addresses: 20.20.0.0
1/1
1/5
SI