438
[NAT2-acl-basic-2000] quit
# Create address group 1.
[NAT2] nat address-group 1
# Add address 1.0.0.2 into the group.
[NAT2-nat-address-group-1] address 1.0.0.2 1.0.0.2
[NAT2-nat-address-group-1] quit
# Configure NAT on GigabitEthernet 2/0/1.
[NAT2] interface gigabitethernet 2/0/1
[NAT2-GigabitEthernet2/0/1] nat outbound 2000 address-group 1
[NAT2-GigabitEthernet2/0/1] quit
# Configure EIM for PAT to translate the source address and source port of packets matching
ACL 2000 from the same address and port to the same source public address and port.
[NAT2] nat mapping-behavior endpoint-independent acl 2000
Configuring NAT 3
# Configure NAT 3 in the same way that NAT 2 is configured. (Details not shown.)
Configuring NAT 4
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure NAT internal servers on GigabitEthernet 2/0/1:
{ Allow external VAM clients to access VAM and AAA servers by using the public address
1.0.0.4.
{ Specify the source UDP port number as 18000 for both the primary and secondary VAM
servers.
{ Specify the UDP port number after NAT as 4001 for the primary server, and as 4002 for the
secondary server.
<NAT4> system-view
[NAT4] interface gigabitethernet 2/0/1
[NAT4-GigabitEthernet2/0/1] nat server protocol udp global current-interface 4001
inside 10.0.0.3 18000
[NAT4-GigabitEthernet2/0/1] nat server protocol udp global current-interface 4002
inside 10.0.0.4 18000
Verifying the configuration
# Display IPv4 address mapping information for all VAM clients registered with the primary VAM
server.
[PrimaryServer] display vam server address-map
ADVPN domain name: abc
Total private address mappings: 4
Group Private address Public address Type NAT Holding time
0 192.168.0.1 1.0.0.1 Hub Yes 0H 52M 7S
0 192.168.0.2 1.0.0.1 Hub Yes 0H 47M 31S
0 192.168.0.3 1.0.0.2 Spoke Yes 0H 28M 25S
0 192.168.0.4 1.0.0.3 Spoke Yes 0H 19M 15S
# Display IPv4 address mapping information for all VAM clients registered with the secondary VAM
server.
[SecondaryServer] display vam server address-map
ADVPN domain name: abc
Total private address mappings: 4
Group Private address Public address Type NAT Holding time
To Next Page
Loading...
Need help?
General
