map lan0 192.168.0.4/32 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.4/32 -> 15.99.84.23/32
EOF
More examples of NAT and other IPFilter rules are available at /opt/ipf/examples.
2. Enable NAT based on this rule set
% ipnat -f /tmp/nat.rules
Note: If there are existing NAT rules that you want to replace, you must flush and delete
that rule set before loading the new rules:
% ipnat -FC -f /tmp/nat.rules
For more complicated manipulations of the rules, refer to ipnat man pages.
Enable NAT in the Compute Nodes
Configure the routing table in each Compute Node to route packets that cannot be directly delivered to t
Management Server, which serves as the gateway node. This will normally be done automatically by
compute_config.
Example: In this example, lan1 is the private subnet of the Compute Nodes, and the Management Server'
lan1 interface is 192.168.0.1. The following steps should be performed to configure the routing tables in
each Compute Node:
z
On each Compute Node, issue the command:
% /usr/sbin/route add default 192.168.0.1 1
z
On each Compute Node, add or modify the default route in /etc/rc.config.d/netconf. For
example:
ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]="192.168.0.1"
ROUTE_COUNT[0]=""
ROUTE_ARGS[0]=""
Verify the NAT installation
To verify that the HP-UX IPFilter NAT configuration works, select any Compute Node that has its addr
translated, and perform the following tests:
z
Ping test
On the Compute Node, contact a machine that is not part of the cluster using the 'ping'
command. For example:
% ping 15.99.22.42
To Next Page
Loading...
Need help?
General