R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)
122
• The reversible keyword enables the device to perform the following operations:
{ Compare the destination IP address in the first packet from the private network to the public
network against existing NO-PAT entries.
{ Translate the destination address into the NAT address in a matching NO-PAT entry.
Inbound dynamic NAT does not support Easy IP.
To configure inbound dynamic NAT:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Configure an address
group and enter its view.
nat address-group group-number By default, no address group exists.
3. Add a group member to
the address group.
address start-address end-address
By default, no group member exists.
You can add multiple members to an
address group.
The IP addresses of the members must
not overlap.
4. Enter interface view.
interface interface-type
interface-number
N/A
5. Configure inbound
dynamic NAT.
nat inbound acl-number
address-group group-number
[ vpn-instance vpn-instance-name ]
[ no-pat [ reversible ] [ add-route ] ]
By default, inbound dynamic NAT is
not configured.
You can configure multiple inbound
dynamic NAT rules on an interface.
Configuring NAT Server
To configure NAT Server, map an external IP address and port number to the real IP address and port
number of an internal server on the interface that connects the external network.
An internal server can be located in a common private network or a VPN instance.
If you specify the acl keyword for the NAT Server configuration, only packets matching the ACL permit
rule are translated. NAT uses only the match criteria of the source IP address, source port number,
destination IP address, destination port number, transport layer protocol, and VPN instance in the ACL
rule for packet matching.
Configuring common NAT Server
Map the real private IP address and port number of an internal server to a public IP address and port
number so that hosts in external networks can access the internal server.
To configure common NAT Server:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter interface
view.
interface interface-type interface-number N/A