F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100

ii
Configuring a dynamic mapping policy on the IPv6 side ················································································ 39
Configuring IPv4/IPv6 address mappings on the IPv4 side ······················································································ 40
Configuring a static mapping on the IPv4 side ·································································································· 40
Configuring a dynamic mapping policy on the IPv4 side ················································································ 41
Setting the ToS field after NAT-PT translation ············································································································· 41
Setting the traffic class field after NAT-PT translation ································································································· 41
Configuring static NAPT-PT mappings of IPv6 servers ······························································································· 42
Displaying and maintaining NAT-PT ···························································································································· 42
NAT-PT configuration examples ··································································································································· 43
Configuring dynamic mapping on the IPv6 side ······························································································· 43
Configuring static mappings on the IPv4 side and the IPv6 side ····································································· 44
Troubleshooting NAT-PT ················································································································································ 45
Symptom ································································································································································· 45
Solution ··································································································································································· 45
NAT444 ······································································································································································ 46
Feature and hardware compatibility ···························································································································· 46
Overview ········································································································································································· 46
Features ··········································································································································································· 46
Assigning port blocks ············································································································································ 46
Static mappings ····················································································································································· 47
NAT unlimited connection ···································································································································· 47
User connection limit ············································································································································· 48
Full cone NAT ························································································································································ 48
Multiple routing protocols ····································································································································· 48
NAT444 configuration task list ····································································································································· 48
Configuring NAT444 static IP-port mappings············································································································· 48
Configuring NAT444 dynamic IP-port mappings ······································································································· 49
Configuration prerequisites ·································································································································· 49
Configuration procedure ······································································································································ 50
Configuring Full cone NAT ··········································································································································· 50
Configuring NAT444 logging ······································································································································ 51
Displaying and maintaining NAT444 ························································································································· 51
NAT444 configuration examples ································································································································· 51
Network requirements ··········································································································································· 51
Configuration procedure ······································································································································ 53
Configuring ALG ························································································································································ 55
ALG process ··································································································································································· 56
Configuring ALG in the Web interface ························································································································ 57
Configuration procedure ······································································································································ 57
FTP ALG configuration example ·························································································································· 208H57
88HSIP/H.323 ALG configuration example ············································································································· 209H59
89HNBT ALG configuration example ························································································································· 210H62
90HConfiguring ALG at the CLI ··········································································································································· 211H66
91HFTP ALG configuration example ·························································································································· 212H66
92HSIP/H.323 ALG configuration example ············································································································· 213H66
93HNBT ALG configuration example ························································································································· 214H67
94HSupport and other resources ····································································································································· 215H69
95HContacting HP ································································································································································ 216H69
96HSubscription service ·············································································································································· 217H69
97HRelated information ························································································································································ 218H69
98HDocuments ······························································································································································ 219H69
99HWebsites ································································································································································· 220H69
100HConventions ···································································································································································· 221H70