R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

137
NAT Server for external-to-internal access
Network requirements
As shown in Figure 57, two Web servers, one FTP server and one SMTP server are in the internal network
to provide services for external users. The internal network address is 10.110.0.0/16. The company has
three public IP addresses from 202.38.1.1/24 to 202.38.1.3/24.
Configure the NAT Server feature to allow the external user to access the internal servers with public
address 202.38.1.1/24.
Figure 57 Network diagram
Configuration procedure
# Specify IP addresses for the interfaces. (Details not shown.)
# Enter interface view of GigabitEthernet 2/1/2.
<Router> system-view
[Router] interface gigabitethernet 2/1/2
# Configure NAT Server to allow external users to access the FTP server by using the address 202.38.1.1
and port 21.
[Router-GigabitEthernet2/1/2] nat server protocol tcp global 202.38.1.1 21 inside
10.110.10.3 ftp
# Configure NAT Server to allow external users to access the Web server 1 by using the address
202.38.1.1 and port 80.
[Router-GigabitEthernet2/1/2] nat server protocol tcp global 202.38.1.1 80 inside
10.110.10.1 http
# Configure NAT Server to allow external users to access the Web server 2 by using the address
202.38.1.1 and port 8080.
[Router-GigabitEthernet2/1/2] nat server protocol tcp global 202.38.1.1 8080 inside
10.110.10.2 http
# Configure NAT Server to allow external users to access the SMTP server by using the address
202.38.1.1 and port number defined by SMTP.
[Router-GigabitEthernet2/1/2] nat server protocol tcp global 202.38.1.1 smtp inside
10.110.10.4 smtp
[Router-GigabitEthernet2/1/2] quit