F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100
Table Of Contents
- Title Page
- Table of Contents
- Configuring NAT
- Overview
- Configuration guidelines
- Configuring NAT in the Web interface
- Recommended configuration procedure
- Creating an address pool
- Configuring dynamic NAT on an interface
- Creating a static address mapping
- Enabling static NAT on an interface
- Configuring an internal server
- Configuring ACL-based NAT on the internal server
- Configuring DNS mapping
- NAT configuration example
- Internal server configuration example
- Configuring NAT at the CLI
- NAT configuration task list
- Configuring static NAT
- Configuring dynamic NAT
- Configuring an internal server
- Configuring ACL-based NAT on an internal server
- Configuring DNS mapping
- Displaying and maintaining NAT
- One-to-one static NAT configuration example
- Dynamic NAT configuration example
- Common internal server configuration example
- NAT DNS mapping configuration example
- Troubleshooting NAT
- Configuring NAT-PT
- Feature and hardware compatibility
- Overview
- NAT-PT configuration task list
- Configuration prerequisites
- Enabling NAT-PT
- Configuring a NAT-PT prefix
- Configuring IPv4/IPv6 address mappings on the IPv6 side
- Configuring IPv4/IPv6 address mappings on the IPv4 side
- Setting the ToS field after NAT-PT translation
- Setting the traffic class field after NAT-PT translation
- Configuring static NAPT-PT mappings of IPv6 servers
- Displaying and maintaining NAT-PT
- NAT-PT configuration examples
- Troubleshooting NAT-PT
- NAT444
- Configuring ALG
- Support and other resources
- Index

21
e.
Click Apply.
Figure 21 Configuring dynamic NAT
54BInternal server configuration example
117BNetwork requirements
As illustrated in 248HFigure 22, a company provides two Web servers and one FTP server for external users
to access. The internal network address is 10.110.0.0/16. The internal address for the FTP server is
10.110.10.3/16, for the Web server 1 is 10.110.10.1/16, and for the Web server 2 is 10.110.10.2/16. The
company has three public IP addresses from 202.38.1.1/24 through 202.38.1.3/24. Specifically, the
company has the following requirements:
• External hosts can access internal servers using public address 202.38.1.1/24.
• Port 8080 is used for Web server 2.
Figure 22 Network diagram
118BConfiguring Firewall
1. Configure the FTP server:
a. From the navigation tree, select Firewall > NAT Policy > Internal Server.
b. Click Add in the Internal Server area.
c. On the page that appears, select GigabitEthernet0/1 for Interface.
d. Select the Assign IP Address option, and enter 202.38.1.1.