R3721-F3210-F3171-HP High-End Firewalls NAT and ALG Configuration Guide-6PW101
i
Contents
Configuring NAT ·························································································································································· 1
Overview ············································································································································································ 1
Introduction to NAT ·················································································································································· 1
NAT control ······························································································································································· 2
NAT operation ·························································································································································· 2
Low-priority address pool ········································································································································ 5
Configuring NAT in the Web interface ·························································································································· 6
Configuration overview ··········································································································································· 6
Creating an address pool ······································································································································· 7
Configuring dynamic NAT ······································································································································ 8
Creating a static address mapping ························································································································ 9
Enabling static NAT on an interface ··················································································································· 11
Creating an internal server ··································································································································· 11
Configuring a DNS mapping ······························································································································· 13
NAT configuration example ································································································································· 14
Internal server configuration example ················································································································· 17
Configuring NAT at the CLI ·········································································································································· 20
NAT configuration task list at the CLI ··························································································································· 20
Configuring address translation ··································································································································· 21
Configuring static NAT ········································································································································· 21
Configuring dynamic NAT ··································································································································· 22
Configuring an internal server ······································································································································ 24
Introduction to internal server ······························································································································· 24
Configuring a common internal server ··············································································································· 24
Configuring DNS mapping ··········································································································································· 25
Displaying and maintaining NAT································································································································· 25
NAT configuration examples ········································································································································ 26
One-to-one static NAT configuration example ··································································································· 26
Dynamic NAT configuration example ················································································································· 26
Common internal server configuration example ································································································ 27
NAT DNS mapping configuration example ······································································································· 28
Troubleshooting NAT ····················································································································································· 29
Symptom 1 ····························································································································································· 29
Solution: ·································································································································································· 29
Symptom 2 ····························································································································································· 30
Solution ··································································································································································· 30
Configuration guidelines ··············································································································································· 30
Configuration NAT-PT ················································································································································ 31
Overview ········································································································································································· 31
Application scenario ············································································································································· 31
Basic concepts ······················································································································································· 31
Implementing NAT-PT ············································································································································ 32
NAT-PT limitations ················································································································································· 33
Protocols and standards ······································································································································· 33
NAT-PT configuration task list ······································································································································· 34
NAT-PT configuration task list on the IPv6 side ·································································································· 34
NAT-PT configuration task list on the IPv4 side ·································································································· 34
Configuring NAT-PT ······················································································································································· 34