R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)
v
Bidirectional NAT ················································································································································ 110
Twice NAT ··························································································································································· 110
NAT hairpin ························································································································································· 110
NAT translation control ··············································································································································· 111
NAT implementations ·················································································································································· 111
Static NAT ···························································································································································· 111
Dynamic NAT ······················································································································································ 111
NAT Server ·························································································································································· 112
NAT444 ······························································································································································· 113
NAT entries ··································································································································································· 115
NAT session entry················································································································································ 115
EIM entry ······························································································································································ 115
NO-PAT entry ······················································································································································· 115
NAT444 entry ······················································································································································ 115
Using NAT with other features ···································································································································· 116
NAT with multiple VPN instances ······················································································································ 116
NAT with DNS mapping ···································································································································· 116
NAT with ALG ····················································································································································· 117
NAT configuration task list ·········································································································································· 117
Configuring static NAT ················································································································································ 117
Configuration prerequisites ································································································································ 117
Configuring outbound one-to-one static NAT ··································································································· 118
Configuring outbound net-to-net static NAT ····································································································· 118
Configuring inbound one-to-one static NAT ····································································································· 119
Configuring inbound net-to-net static NAT ········································································································ 119
Configuring dynamic NAT ·········································································································································· 120
Configuration restrictions and guidelines ········································································································· 120
Configuration prerequisites ································································································································ 120
Configuring outbound dynamic NAT ················································································································ 120
Configuring inbound dynamic NAT ·················································································································· 121
Configuring NAT Server ·············································································································································· 122
Configuring common NAT Server ····················································································································· 122
Configuring load sharing NAT Server ·············································································································· 123
Configuring NAT444 ·················································································································································· 124
Configuring static NAT444 ································································································································ 124
Configuring dynamic NAT444 ·························································································································· 125
Configuring NAT with DNS mapping ······················································································································· 125
Configuring NAT hairpin ············································································································································ 126
Configuring NAT with ALG ········································································································································· 126
Configuring NAT logging ··········································································································································· 126
Configuring NAT session logging ····················································································································· 126
Configuring NAT444 user logging ··················································································································· 127
Configuring NAT444 alarm logging ················································································································ 128
Displaying and maintaining NAT······························································································································· 128
NAT configuration examples ······································································································································ 130
One-to-one static NAT for internal-to-external access ······················································································ 130
Outbound dynamic NAT for internal-to-external access (non-overlapping addresses) ································ 131
Bidirectional NAT for internal-to-external access ····························································································· 133
NAT Server for external-to-internal access ········································································································ 137
NAT Server for external-to-internal access through domain name ································································· 139
Bidirectional NAT for external-to-internal access through NAT Server ·························································· 142
NAT hairpin in C/S mode ································································································································· 146
NAT hairpin in P2P mode for access between internal users ········································································· 149
Twice NAT for access between two VPNs with overlapping addresses ······················································· 151