F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices NAT and ALG Configuration Guide-6PW100
Table Of Contents
- Title Page
- Table of Contents
- Configuring NAT
- Overview
- Configuration guidelines
- Configuring NAT in the Web interface
- Recommended configuration procedure
- Creating an address pool
- Configuring dynamic NAT on an interface
- Creating a static address mapping
- Enabling static NAT on an interface
- Configuring an internal server
- Configuring ACL-based NAT on the internal server
- Configuring DNS mapping
- NAT configuration example
- Internal server configuration example
- Configuring NAT at the CLI
- NAT configuration task list
- Configuring static NAT
- Configuring dynamic NAT
- Configuring an internal server
- Configuring ACL-based NAT on an internal server
- Configuring DNS mapping
- Displaying and maintaining NAT
- One-to-one static NAT configuration example
- Dynamic NAT configuration example
- Common internal server configuration example
- NAT DNS mapping configuration example
- Troubleshooting NAT
- Configuring NAT-PT
- Feature and hardware compatibility
- Overview
- NAT-PT configuration task list
- Configuration prerequisites
- Enabling NAT-PT
- Configuring a NAT-PT prefix
- Configuring IPv4/IPv6 address mappings on the IPv6 side
- Configuring IPv4/IPv6 address mappings on the IPv4 side
- Setting the ToS field after NAT-PT translation
- Setting the traffic class field after NAT-PT translation
- Configuring static NAPT-PT mappings of IPv6 servers
- Displaying and maintaining NAT-PT
- NAT-PT configuration examples
- Troubleshooting NAT-PT
- NAT444
- Configuring ALG
- Support and other resources
- Index
52
Figure 37 A BRAS with 1 to n NAT444 gateways network diagram
• Bypass core router
Figure 38 A CR with 1 to n NAT444 gateways network diagram
MAN
CR-1 CR-2
BRAS SR BRAS
NAT444-1
NAT444-2
Bridging users
Routing users
a) Distributed bypass NAT444
MAN
CR-1 CR-2
BRAS SR BRAS
Bridging users
Routing users
b) Distributed inserted card NAT444
NAT444
IPv6 network
IPv4 network IPv6 network
IPv4 network
IPv4 network IPv6 network
MAN
CR-1 CR-2
BRAS-2 BRAS-1 SR-1
Bridging users
Routing users
b) Centralized inserted card NAT444
SR-2
NAT444-1
NAT444-2
IPv4 network IPv6 network
MAN
CR-1 CR-2
BRAS-2 BRAS-1 SR-1
NAT444-1
NAT444-2
Bridging users
Routing users
a) Centralized bypass NAT444
NAT444-3
NAT444-4
SR-2