R3166-R3206-HP High-End Firewalls NAT and ALG Configuration Guide-6PW101

19
To do… Use the command… Remarks
Enter interface view
interface interface-type
interface-number
—
Enable Easy IP by associating an ACL
with the IP address of the interface
nat outbound [ acl-number ]
[ track vrrp virtual-router-id ]
Required
4. Configuring No-PAT
With a specific ACL associated with an address pool or interface address, No-PAT translates the source
address of a packet permitted by the ACL into an IP address of the address pool or the interface address,
without using the port information.
Follow these steps to configure No-PAT:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Configure No-PAT by associating an
ACL with an IP address pool on the
outbound interface for translating
only IP addresses
nat outbound [ acl-number ]
address-group group-number
no-pat [ track vrrp
virtual-router-id ]
Required
Support for the optional
acl-number argument depends on
the device model.
5. Configuring NAPT
With a specific ACL associated with an address pool or interface address, NAPT translates the source
address of a packet permitted by the ACL into an IP address of the address pool or the interface address,
with using the port information.
Follow these steps to configure NAPT:
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Configure NAPT by associating an
ACL with an IP address pool on the
outbound interface for translating
both IP address and port number
nat outbound [ acl-number ]
[ address-group group-number ]
[ track vrrp virtual-router-id ]
Required
Return to system view quit —
Configuring an internal server
1. Introduction to internal server
To configure an internal server, you need to map an external IP address and port number to the internal
server. This is done through executing the nat server command on an interface.
Internal server configurations include external network information (external IP address global-address
and external port number global-port), internal network information (internal IP address local-address
and internal port number local-port), and internal server protocol type. According to different