User Manual

Enterasys X-Pedition User Reference Manual 335
Configuration Examples
are created; he/she just sets the pools and the XP automatically chooses a free global IP from the
global pool for the local IP.
Dynamic bindings are removed when the flow count goes to zero or the timeout has been reached.
The removal of bindings frees the port for that global and the port is available for reuse. When all
the ports for that global are used, then ports are assigned from the next free global. If no more ports
and globals are available, the packets will be dropped.
Dynamic NAT with DNS
The following example configures a DNS dynamic address binding for outside address
192.50.20.2-192.50.20.9 to inside addresses 10.1.1.0/24:
The first step is to create the interfaces:
Next, define the interfaces to be NAT “inside” or “outside”:
Then, define the NAT dynamic rules by first creating the source ACL pool and then configuring the
dynamic bindings:
et.2.2
(192.50.20.1/24)
et.2.1
(10.1.1.1/24)
Global Internet
IP network 10.1.1.0/24
Router
interface 10-net interface 192-net
DNS
DNS server static binding of 10.1.1.10 to 192.50.20.10
10.1.1.10
10.1.1.2 10.1.1.3
Server
interface create ip 10-net address-netmask 10.1.1.1/24 port et.2.1
interface create ip 192-net address-netmask 192.50.20.1/24 port et.2.2
nat set interface 10-net inside
nat set interface 192-net outside
acl lcl permit ip 10.1.1.0/24
nat create dynamic local-acl-pool lcl global-pool 192.50.20.2-192.50.20.9
nat create static local-ip 10.1.1.10 global-ip 192.50.20.10 protocol ip