HP VPN Firewall Appliances NAT and ALG Configuration Guide

28
Ste
p
Command
1. Enter system view.
system-view
2. Enter interface view.
interface interface-type interface-number
3. Configure an internal server based on
ACL.
nat server protocol pro-type global acl-number inside
local-address [ local-port ] [ vpn-instance local-name ]
Configuring DNS mapping
With DNS mapping, an internal host can access an internal server on the same private network by using
the domain name of the internal server when the DNS server resides on the public network.
To configure a DNS mapping:
Ste
p
Command
1. Enter system view.
system-view
2. Configure a DNS mapping.
nat dns-map domain domain-name protocol pro-type ip global-ip
port global-port
Displaying and maintaining NAT
Task Command Remarks
Display information about NAT
address pools.
display nat address-group [ group-number ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view.
Display all NAT configuration
information.
display nat all [ | { begin | exclude | include }
regular-expression ]
Available in any view.
Display NAT configuration
information.
display nat bound [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display DNS mapping
configuration information.
display nat dns-map [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display the internal server
information.
display nat server [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display static NAT information.
display nat static [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display NAT statistics.
display nat statistics [ | { begin | exclude |
include } regular-expression ]
Available in any view.
One-to-one static NAT configuration example
Network requirements
An internal host 10.110.10.8/24 uses public address 202.38.1.100 to access the Internet.