F3215-HP Load Balancing Module Network Management Configuration Guide-6PW101

120
[LB-GigabitEthernet0/2] quit
Dynamic NAT configuration example
Network requirements
As shown in Figure 78, a company has three public IP addresses ranging from 202.38.1.1/24 to
202.38.1.3/24, and a private network segment of 10.110.0.0/16. Specifically, the company requires
that the internal users in subnet 10.110.10.0/24 can access the Internet through NAT.
Figure 78 Network diagram
Configuration procedure
# As shown in Figure 78, specify IP addresses for the interfaces. (Details not shown.)
# Configure address pool 1.
<LB> system-view
[LB] nat address-group 1 202.38.1.2 202.38.1.3
# Configure ACL 2001, permitting only users from network segment 10.110.10.0/24 to access the
Internet.
[LB] acl number 2001
[LB-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255
[LB-acl-basic-2001] rule deny
[LB-acl-basic-2001] quit
# Associate address pool 1 and ACL 2001 with the outbound interface GigabitEthernet 0/2.
• No-PAT
[LB] interface gigabitethernet 0/2
[LB-GigabitEthernet0/2] nat outbound 2001 address-group 1 no-pat
[LB-GigabitEthernet0/2] quit
• NAPT
[LB] interface gigabitethernet 0/2
[LB-GigabitEthernet0/2] nat outbound 2001 address-group 1
[LB-GigabitEthernet0/2] quit