F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100

26
122BConfiguring NAT address pools
You can configure NAT address pools in two ways:
• Configure an address pool that consists of a set of consecutive addresses.
• Configure an address group that can contain several members. Each member specifies an address
pool that consists of a set of consecutive addresses. The address pools of members may not be
consecutive.
The NAT device selects an IP address from a specific NAT address pool as the source address of a
packet.
To configure an address pool:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure an address
pool.
nat address-group group-number start-address
end-address [ level level ]
Address pools must not
overlap.
To configure an address group:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create an address group and
enter its view.
nat address-group
group-number
N/A
3. Add a member to the address
group.
address start-address
end-address
The IP address pools of address group
members must not overlap with each other
or with other address pools.
123BConfiguring Easy IP
Easy IP allows the device to use the IP address of one of its interfaces as the source address of NATed
packets.
To configure Easy IP:
Ste
p
Command
1. Enter system view.
system-view
2. Enter interface view. interface interface-type interface-number
3. Enable Easy IP by associating an ACL with
the IP address of the interface.
nat outbound [ acl-number ] [ next-hop ip-address ] [ track
vrrp virtual-router-id ]
124BConfiguring No-PAT
With a specific ACL associated with an address pool or interface address, No-PAT translates the source
address of a packet permitted by the ACL into an IP address of the address pool or the interface address,
without using the port information.
To configure No-PAT: