R3721-F3210-F3171-HP High-End Firewalls NAT and ALG Configuration Guide-6PW101

ii
Configuration prerequisites ·································································································································· 34
Enabling NAT-PT ··················································································································································· 35
Configuring a NAT-PT prefix ································································································································ 35
Configuring IPv4/IPv6 address mappings on the IPv6 side ············································································· 35
Configuring IPv4/IPv6 address mappings on the IPv4 side ············································································· 37
Setting the Traffic Class field after NAT-PT translation ······················································································ 38
Setting the traffic class field after NAT-PT translation ························································································ 38
Configuring static NAPT-PT mappings of IPv6 servers ······················································································ 39
Displaying and maintaining NAT-PT ···························································································································· 39
NAT-PT configuration examples ··································································································································· 40
Configuring dynamic mapping on the IPv6 side ······························································································· 40
Configuring static mappings on the IPv4 side and the IPv6 side ····································································· 41
Troubleshooting NAT-PT ················································································································································ 43
Symptom ································································································································································· 43
Solution ··································································································································································· 43
Configuration ALG ····················································································································································· 44
ALG overview ································································································································································· 44
Configuring ALG in the web interface ························································································································· 46
ALG configuration examples in the web interface ····································································································· 46
FTP ALG configuration example ·························································································································· 46
SIP/H.323 ALG configuration example ············································································································· 50
NBT ALG configuration example ························································································································· 53
Enabling ALG at the CLI ················································································································································ 57
ALG configuration examples at the CLI ······················································································································· 57
FTP ALG configuration example ·························································································································· 57
NBT ALG configuration example ························································································································· 58
Support and other resources ····································································································································· 60
Contacting HP ································································································································································ 60
Subscription service ·············································································································································· 60
Related information ························································································································································ 60
Documents ······························································································································································ 60
Websites ································································································································································· 60
Conventions ···································································································································································· 61
Index ··········································································································································································· 63