136
Step Command Remarks
6. Configure load sharing
NAT Server.
nat server protocol
pro-type
global
{ { global-address
|
current-interface
|
interface
interface-type
interface-number
}
{
global-port
| global-port1 global-port2
}
|
global-address1 global-address2 global-port
}
[
vpn-instance
global-name ]
inside
server-group
group-number
[
vpn-instance
local-name
] [
acl
{ acl-number |
name
acl-name }
]
By default, no load
sharing NAT Server
mapping exists.
You can configure
multiple load sharing
NAT Server mappings on
an interface.
Configuring ACL-based NAT Server
ACL-based NAT Server is an extension of common NAT Server. Common NAT Server maps the
private IP address of the internal server to a single public IP address. ACL-based NAT Server maps
the private IP address of the internal server to a set of public IP addresses defined by an ACL. If the
packet's destination IP address matches a permit rule, it is translated into the private IP address of
the internal server.
To configure ACL-based NAT Server:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type interface-number
N/A
3. Configure ACL-based
NAT Server.
nat server global
{ global-acl-number |
name
global-acl-name }
inside
local-address [ local-port ] [
vpn-instance
local-name ]
By default, no ACL-based
NAT Server mapping exists.
You can configure multiple
NAT Server mappings on an
interface.
Configuring DS-Lite NAT444
DS-Lite NAT444 is configured on the AFTR's interface connected to the external network. DS-Lite
NAT444 supports only dynamic NAT444. DS-Lite NAT444 uses an IPv6 ACL to identify packets to be
NATed.
To configure DS-Lite NAT444:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a NAT address
group, and enter its view.
nat address-group
group-number
By default, no NAT address group
exists.
3. Add a public IP address
range to the NAT
address group.
address
start-address
end-address
By default, no public IP address range
exists in the NAT address group.
You can add multiple public IP address
ranges to an address group, but they
cannot overlap.
4. Configure the port range
for the public IP
addresses.
port-range
start-port-number
end-port-number
By default, the port range is 1 to 65535.
The configuration takes effect only on
PAT translation mode.
5. Configure port block
port-block block-size
By default, no port block parameter
To Next Page
Loading...
Need help?
General
