152
Step Command Remarks
[
extended-block-numbe
extended-block-number ]
The configuration takes effect only on
PAT translation mode.
6. Return to system view.
quit
N/A
7. Enter interface view.
interface
interface-type
interface-number
N/A
8. Configure PAT for
outbound dynamic NAT.
nat outbound
[ ipv4-acl-number |
name
ipv4-acl-name ]
[
address-group
{ group-id |
name
group-name } ]
[
vpn-instance
vpn-instance-name ]
[
port-preserved
] [
disable
]
By default, no outbound dynamic NAT
rules exist.
The
port-preserved
keyword does not
take effect on dynamic NAT444.
9. Return to system view.
quit
N/A
10. (Optional.) Configure a
PAT mapping mode.
nat mapping-behavior
endpoint-independent
[
acl
{ ipv4-acl-number |
name
ipv4-acl-name } ]
The default mapping mode is
Address
and Port-Dependent Mapping
.
Enabling global mapping sharing for dynamic NAT444
When multiple interfaces have dynamic NAT444 configured, the interfaces might create different
NAT444 mappings for packets from the same IP address. You can perform this task to configure the
interfaces to share the same NAT444 mapping for translating packets from the same IP address.
To enable global mapping sharing for dynamic NAT444:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enable global mapping
sharing for dynamic NAT444.
nat port-block global-share
enable
By default, global mapping
sharing is disabled for dynamic
NAT444.
Configuring DS-Lite NAT444
DS-Lite NAT444 is configured on the AFTR's interface connected to the external network. DS-Lite
NAT444 supports only dynamic NAT444.
The DS-Lite NAT444 configuration is similar to the dynamic NAT444 configuration. The difference is
that DS-Lite NAT444 uses an IPv6 ACL and dynamic NAT444 uses an IPv4 ACL to identify packets
to be NATed.
To configure DS-Lite NAT444:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a NAT address
group, and enter its view.
nat address-group
group-id
[
name
group-name ]
By default, no NAT address groups
exist.
To Next Page
Loading...
Need help?
General
