R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

120
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure a net-to-net mapping
for inbound static NAT.
nat static inbound net-to-net
global-start-address
global-end-address [ vpn-instance
global -name ] local local-network
{ mask-length | mask }
[ vpn-instance local-name ] [ acl
acl-number [ reversible ] ]
By default, no mappings exist.
If you specify the acl keyword,
NAT processes only packets
matching the permit statement in
the ACL.
3. Return to system view.
quit N/A
4. Enter interface view.
interface interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable By default, static NAT is disabled.
Configuring dynamic NAT
Dynamic NAT implements address translation by mapping a group of IP addresses to a smaller number
of NAT addresses. You can specify an address group (or the IP address of an interface) and ACL to
implement dynamic NAT on the NAT interface.
Configuration restrictions and guidelines
• You can configure multiple dynamic NAT rules. A NAT rule is an inbound or outbound
configuration.
• A NAT rule with an ACL takes precedence over a rule without any ACL.
• The priority for the ACL-based dynamic NAT rules depends on ACL number. A higher ACL number
represents a higher priority.
Configuration prerequisites
• Configure an ACL to identify the IP addresses to be translated. NAT uses only the match criteria of
the source IP address, source port number, destination IP address, destination port number,
transport layer protocol, and VPN instance in the ACL rule for packet matching. For more
information about ACLs, see ACL and QoS Configuration Guide.
• Determine whether to enable the Easy IP function. If you use the IP address of an interface as the
NAT address, you are configuring Easy IP.
• Determine a public IP address pool for address translation.
• Determine whether to translate port number. Use NO-PAT to translate only IP addresses and PAT to
translate both IP addresses and port numbers.
Configuring outbound dynamic NAT
To translate private IP addresses into public IP addresses, configure outbound dynamic NAT on the
interface that connects the external network.