4000 Router Series Layer 3 - IP Services Configuration Guide

145

NAT ALG:

DNS: Enabled

FTP: Enabled

H323: Enabled

ICMP-ERROR: Enabled

# Use the display nat session verbose command to display NAT session information generated when

Client A accesses Client B.

[Router] display nat session verbose

Initiator:

Source IP/port: 192.168.1.3/44929

Destination IP/port: 202.38.1.3/1

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

Responder:

Source IP/port: 192.168.1.2/69

Destination IP/port: 202.38.1.3/1024

VPN instance/VLAN ID/VLL ID: -/-/-

Protocol: UDP(17)

State: UDP_READY

Application: TFTP

Start time: 2012-08-15 15:53:36 TTL: 46s

Interface(in) : GigabitEthernet1/1

Interface(out): GigabitEthernet1/1

Initiator->Responder: 1 packets 56 bytes

Responder->Initiator: 1 packets 72 bytes

Total sessions found: 1

Twice NAT for access between two VPNs with overlapping

addresses

Network requirements

As shown in Figure 60, two departments are in different VPNs with overlapping addresses. Configure

twice NAT so that Host A and Host B in different departments can access each other.

Figure 60 Network diagram