Alcatel-Lucent OmniAccess 5740 - Page 727

Destination NAT Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
701
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Note: Currently, multiple match-lists cannot be associated to a firewall policy rule for NAT. To
configure more than one match-list within a firewall policy, add multiple rules with
different match-lists.
If a DNAT policy with the pool configuration is attached to an interface, and at any
given point of time, the list is modified, you need to reapply the NAT policy on the
interface.
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91
ALU(config-nat-N2)# match m1 destination-nat pool l1
T
O CONFIGURE PORT NUMBER FOR DNAT
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91
port 100
ALU(config-nat-N2)# match m1 destination-nat pool l1 port 100
T
O CONFIGURE STATIC DNAT
E
XAMPLE
ALU(config-nat-N2)# match m1 destination-nat pool l1 static
Command (in NCM) Description
[<1-65535>] match [{all|any}]
<match-list name> destination-
nat {host {<ip-address|host-
name>}|pool <list-name>} port
<1-65535>
This command is used to configure
port number for a DNAT.
Command (in NCM) Description
[<1-65535>] match [{all|any}]
<match-list name> destination-
nat pool <list-name> static
This command is used to configure a
static DNAT that uses one-to-one
address mapping without port
translation.