User Manual

Enterasys X-Pedition User Reference Manual 331
NAT and VRRP
enabled (nat set secure-plus on) in order to increase security and prevent private address leaks. For
more information, please reference RFC 1579 (“Firewall-Friendly FTP”).
NAT and VRRP
NAT interfaces do not currently support VRRP.
Monitoring NAT
To display NAT information, enter the following command in Enable mode.
Configuration Examples
This section shows examples of NAT configurations.
Static Configuration
The following example configures a static address binding for inside address 10.1.1.2 to outside
address 192.50.20.2:
The first step is to create the interfaces:
Display NAT information.
nat show [translations all|<type>] [timeouts] [statistics]
et.2.2
(192.50.20.1/24)
et.2.1
(10.1.1.1/24)
Global Internet
IP network 10.1.1.0/24
Router
interface 10-net interface 192-net
10.1.1.2
Outbound: Translate source 10.1.1.2 to 192.50.20.2
Inbound: Translate destination 192.50.20.2 to 10.1.1.2
interface create ip 10-net address-netmask 10.1.1.1/24 port et.2.1
interface create ip 192-net address-netmask 192.50.20.1/24 port et.2.2