F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100
Table Of Contents
- Title Page
- Table of Contents
- Configuring NAT
- Overview
- Configuration guidelines
- Configuring NAT in the Web interface
- Recommended configuration procedure
- Creating an address pool
- Configuring dynamic NAT on an interface
- Creating a static address mapping
- Enabling static NAT on an interface
- Configuring an internal server
- Configuring ACL-based NAT on the internal server
- Configuring DNS mapping
- NAT configuration example
- Internal server configuration example
- Configuring NAT at the CLI
- NAT configuration task list
- Configuring static NAT
- Configuring dynamic NAT
- Configuring an internal server
- Configuring ACL-based NAT on an internal server
- Configuring DNS mapping
- Displaying and maintaining NAT
- One-to-one static NAT configuration example
- Dynamic NAT configuration example
- Common internal server configuration example
- NAT DNS mapping configuration example
- Troubleshooting NAT
- Configuring NAT-PT
- Feature and hardware compatibility
- Overview
- NAT-PT configuration task list
- Configuration prerequisites
- Enabling NAT-PT
- Configuring a NAT-PT prefix
- Configuring IPv4/IPv6 address mappings on the IPv6 side
- Configuring IPv4/IPv6 address mappings on the IPv4 side
- Setting the ToS field after NAT-PT translation
- Setting the traffic class field after NAT-PT translation
- Configuring static NAPT-PT mappings of IPv6 servers
- Displaying and maintaining NAT-PT
- NAT-PT configuration examples
- Troubleshooting NAT-PT
- NAT444
- Configuring ALG
- Support and other resources
- Index

20
Figure 18 Configuring ACL 2001 to permit users on network 10.110.10.0/24 to access the Internet
h. Click Add on the ACL 2001. Select Deny for Operation, and click Apply.
Figure 19 Configuring ACL 2001 to prohibit other users to access the Internet
2. Configure a NAT address pool:
a. From the navigation tree, select Firewall > NAT Policy > Dynamic NAT.
b. Click Add.
c. On the page that appears as shown in 247HFigure 20, enter 0 in Index, enter 202.38.1.2 in Start
IP Address and enter 202.38.1.3 in End IP Address.
d. Click Apply.
Figure 20 Configuring NAT address pool 0
3. Configure dynamic NAT:
a. Click Add in the Dynamic NAT area.
b. On the page that appears, select GigabitEthernet0/1 for Interface and enter 2001 for ACL.
c. Select PAT for Address Transfer.
d. Enter 0 for Address Pool Index.