151
# Create address group 1.
[Router] nat address-group 1
# Add address 202.38.1.3 to the group.
[Router-address-group-1] address 202.38.1.3 202.38.1.3
[Router-address-group-1] quit
# Configure NAT Server on interface GigabitEthernet 2/0/2 to map the address 202.38.1.1 to
10.110.10.3. External users can access the internal DNS server.
[Router] interface gigabitethernet 2/0/2
[Router-GigabitEthernet2/0/2] nat server protocol udp global 202.38.1.2 inside
10.110.10.3 dns
# Enable outbound NO-PAT on interface GigabitEthernet 2/0/2. Use the address in address group 1
to translate the private address in DNS response payload, and allow reversible NAT.
[Router-GigabitEthernet2/0/2] nat outbound 2000 address-group 1 no-pat reversible
[Router-GigabitEthernet2/0/2] quit
Verifying the configuration
# Verify that the host on the external network can access the internal Web server by using the
server's domain name. (Details not shown.)
# Display all NAT configuration and statistics.
[Router] display nat all
NAT address group information:
Totally 1 NAT address groups.
Address group 1:
Port range: 1-65535
Address information:
Start address End address
202.38.1.3 202.38.1.3
NAT outbound information:
Totally 1 NAT outbound rules.
Interface: GigabitEthernet2/0/2
ACL: 2000 Address group: 1 Port-preserved: N
NO-PAT: Y Reversible: Y
Config status: Active
Global flow-table status: Active
NAT internal server information:
Totally 1 internal servers.
Interface: GigabitEthernet2/0/2
Protocol: 17(UDP)
Global IP/port: 202.38.1.2/53
Local IP/port : 10.110.10.3/53
Config status : Active
Global flow-table status: Active
Local flow-table status: Active
NAT logging:
Log enable : Disabled
Flow-begin : Disabled
To Next Page
Loading...
