F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100
Table Of Contents
- Title Page
- Table of Contents
- Configuring NAT
- Overview
- Configuration guidelines
- Configuring NAT in the Web interface
- Recommended configuration procedure
- Creating an address pool
- Configuring dynamic NAT on an interface
- Creating a static address mapping
- Enabling static NAT on an interface
- Configuring an internal server
- Configuring ACL-based NAT on the internal server
- Configuring DNS mapping
- NAT configuration example
- Internal server configuration example
- Configuring NAT at the CLI
- NAT configuration task list
- Configuring static NAT
- Configuring dynamic NAT
- Configuring an internal server
- Configuring ACL-based NAT on an internal server
- Configuring DNS mapping
- Displaying and maintaining NAT
- One-to-one static NAT configuration example
- Dynamic NAT configuration example
- Common internal server configuration example
- NAT DNS mapping configuration example
- Troubleshooting NAT
- Configuring NAT-PT
- Feature and hardware compatibility
- Overview
- NAT-PT configuration task list
- Configuration prerequisites
- Enabling NAT-PT
- Configuring a NAT-PT prefix
- Configuring IPv4/IPv6 address mappings on the IPv6 side
- Configuring IPv4/IPv6 address mappings on the IPv4 side
- Setting the ToS field after NAT-PT translation
- Setting the traffic class field after NAT-PT translation
- Configuring static NAPT-PT mappings of IPv6 servers
- Displaying and maintaining NAT-PT
- NAT-PT configuration examples
- Troubleshooting NAT-PT
- NAT444
- Configuring ALG
- Support and other resources
- Index
41
Ste
p
Command
1. Enter system view. system-view
2. Configure a static IPv4/IPv6 address mapping on the
IPv4 side.
natpt v4bound static ipv4-address ipv6-address
77BConfiguring a dynamic mapping policy on the IPv4 side
A dynamic IPv4/IPv6 address mapping policy on the IPv4 side is that if the source IPv4 address matches
a specific ACL, the source IPv4 address is added with a NAT-PT prefix as the translated IPv6 address.
The natpt-prefix argument specified in the natpt v6bound dynamic acl number acl-number prefix
natpt-prefix command must have been configured with the natpt prefix command. For more information
about ACL, see Access Control Configuration Guide.
To configure a dynamic IPv4/IPv6 mapping policy on the IPv4 side:
Ste
p
Command
1. Enter system view.
system-view
2. Configure a dynamic IPv4/IPv6 source
address mapping policy on the IPv4 side.
natpt v4bound dynamic acl number acl-number prefix
natpt-prefix
19B
Setting the ToS field after NAT-PT translation
You can set the ToS field in IPv4 packets translated from IPv6 packets to 0 or leave it unchanged. 0
indicates that the service priority of the translated packet is set to the lowest. Unchanged indicates that
the existing service priority is used.
To set the ToS field in packets after NAT-PT translation:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Set the ToS field in IPv4 packets
translated from IPv6 packets to
0.
natpt turn-off tos
By default, the value of the ToS field of IPv4
packets is the same as that of the Traffic
Class field in corresponding IPv6 packets.
20B
Setting the traffic class field after NAT-PT translation
You can set the Traffic Class field in IPv6 packets translated from IPv4 packets to 0 or leave it unchanged.
0 indicates that the service priority of the translated packet is set to the lowest. Unchanged indicates that
the existing service priority is used.
To set the Traffic Class field in packets after NAT-PT translation:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A