R3204P16-HP Load Balancing Module Network Management Configuration Guide-6PW101

87
Configuring dynamic NAT
Select Security > NAT > Dynamic NAT from the navigation tree to enter the page shown in Figure 43. In
the Dynamic NAT field where all dynamic NAT policies are displayed, click Add to enter the Add
Dynamic NAT page shown in Figure 45.
Figure 45 Add Dynamic NAT page
Table 14 Dynamic NAT configuration items
Item Descri
p
tion
Interface Specify an interface on which dynamic NAT is to be enabled.
ACL
Specify an ACL for dynamic NAT.
You cannot associate an ACL with multiple NAT address pools, or associate an ACL with
both Easy IP and an address pool.
Address
Transfer
Select an address translation mode:
• PAT: Refers to NAPT. In this mode, associating an ACL with an address pool translates both
IP addresses and port numbers.
• No-PAT: Refers to many-to-many NAT. In this mode, associating an ACL with an address
pool translates only IP addresses.
• Easy IP: In this mode, the NAT gateway directly uses an interface’s public IP address as the
translated IP address, and uses an ACL to match IP packets.
Only one mode can be selected for an address pool.
Address Pool
Index
Specify the index of a NAT address pool for dynamic NAT.
The NAT address pool must have been configured through NAT address configuration.
If Easy IP is selected for Address Transfer, you do not need to type an address pool index.
Enable track to
VRRP
Configure whether to associate dynamic NAT on an interface with a VRRP group, and specify
the VRRP group to be associated if you associate dynamic NAT on an interface with a VRRP
group.
When two network devices implement both stateful failover and dynamic NAT,
• Make sure that each address pool on an interface is associated with one VRRP group only;
otherwise, the system associates the address pool with the VRRP group having the highest
group ID.
• To ensure normal switchovers between the two LB modules, you need to add the modules
to the same VRRP group, and associate dynamic NAT with the VRRP group.
VRRP Group
Return to Dynamic NAT configuration task list.