R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

135
NAT DNS mapping configuration example
Network requirements
As shown in Figure 61, a company provides Web and FTP services to external users, and uses internal IP
network segment 10.110.0.0/16. The IP addresses of the Web and FTP servers are 10.110.10.1/16 and
10.110.10.2/16. The company has three public addresses 202.38.1.1/24 through 202.38.1.3/24. The
DNS server is at 202.38.1.4/24.
• The public IP address 202.38.1.2 is used to provide services to external users.
• External users can use the public address or domain name of internal servers to access them.
• Internal users can access the internal servers by using their domain names.
Figure 61 Network diagram
Configuration procedure
# As shown in Figure 61, configure IP addresses for the interfaces. (Details not shown.)
# Enter the view of interface GigabitEthernet 1/2.
<Router> system-view
[Router] interface gigabitethernet 1/2
# Configure the internal Web server.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.2 inside 10.110.10.1
www
# Configure the internal FTP server.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.2 inside 10.110.10.2
ftp
[Router-GigabitEthernet1/2] quit
# Configure two DNS mapping entries: map the domain name www.server.com of the Web server to
202.38.1.2, and ftp.server.com of the FTP server to 202.38.1.2.
[Router] nat dns-map domain www.server.com protocol tcp ip 202.38.1.2 port www
[Router] nat dns-map domain ftp.server.com protocol tcp ip 202.38.1.2 port ftp
[Router] quit
Verifying the configuration
# After completing the configurations, display the DNS mapping configuration information.
<Router> display nat dns-map
NAT DNS mapping information:
There are currently 2 NAT DNS mapping(s)
FTP server
10.110.10.2/16
Host A
10.110.10.3/16
Internet
GE1/1
10.110.10.10/16
GE1/2
202.38.1.1/24
Router
Web server
10.110.10.1/16
DNS server
202.38.1.4/24
Host B
202.38.1.10/24