HP MSR2000/3000/4000 Router Series Layer 3 - IP Services Configuration Guide

118
• When the destination IP address of a packet from the public matches the global-ip, the destination
IP address is translated into the local-ip.
To configure outbound one-to-one static NAT:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure a one-to-one
mapping for outbound static
NAT.
nat static outbound local-ip
[ vpn-instance local-name ]
global-ip [ vpn-instance
global-name ] [ acl acl-number
[ reversible ] ]
By default, no mappings exist.
If you specify the acl keyword,
NAT processes only packets
matching the permit statement in
the ACL.
3. Return to system view.
quit N/A
4. Enter interface view.
interface interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable By default, static NAT is disabled.
Configuring outbound net-to-net static NAT
For address translation between a private network and a public network, configure outbound net-to-net
static NAT on the interface that connects the external network.
• When the source IP address of a packet from the private network matches the internal NAT address
pool, the source IP address is translated into a public address in the external NAT address pool.
• When the destination IP address of a packet from the public network matches the external NAT
address pool, the destination IP address is translated into a private address in the internal NAT
address pool.
To configure outbound net-to-net static NAT:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure a net-to-net
mapping for outbound static
NAT.
nat static outbound net-to-net
local-start-address
local-end-address [ vpn-instance
local -name ] global
global-network { mask-length |
mask } [ vpn-instance
global-name ] [ acl acl-number
[ reversible ] ]
By default, no mappings exist.
If you specify the acl keyword, Nat
processes only packets matching
the permit statement in the ACL.
3. Return to system view.
quit N/A
4. Enter interface view.
interface interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable
By default, static NAT is disabled.