R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

116
Using NAT with other features
NAT with multiple VPN instances
NAT with multiple VPN instances allows users from different VPN instances to access external networks
and to access each other.
1. Upon receiving a request from a user in a VPN instance to an external network, NAT does the
following:
{ Translates the private source IP address and port number to a NAT IP address and port number.
{ Records the VPN instance information, such as the VPN name.
2. When a response packet arrives, NAT does the following:
{ Translates the destination IP address and port number to the private IP address and port
number.
{ Forwards the packet to the target VPN instance.
The NAT Server feature supports NAT with multiple VPN instances for external users to access the servers
in a VPN instance. For example, to enable a host at 10.110 .1.1 i n V P N 1 t o p r o v i d e We b s e r v i c e s f o r
Internet users, configure NAT Server to use 202.110.10.20 as the public IP address of the Web server.
NAT with DNS mapping
NAT with DNS mapping allows an internal host to access an internal server on the same private network
by using the domain name of the internal server when the DNS server is on the public network.
NAT with DNS mapping must operate with the NAT Server feature. NAT with DNS mapping maps the
domain name of the internal server to the public IP address, public port number, and protocol type of the
server. NAT Server maps the public IP and port to the private IP and port of the internal server.
Figure 53 sh
o
ws the application scenario for NAT with DNS mapping.
Figure 53 NAT with DNS mapping
Configure NAT with DNS mapping to record the mapping of the domain name, public address, public
port number, and protocol type of the Web server. Configure NAT Server to map the public address and
port number to the private address and port number of the Web server.
1. When a DNS reply arrives on the NAT interface, NAT performs a NAT with DNS mapping lookup
by using the domain name.