Configuration Guide Configuring NAT
ip nat inside source static
local-address global-address
[ permit-inside ] [ netmask mask ] [ match
interface ]
Defines the static inside source address
translation relationship.
Optional configuration. It is used to configure dynamic NAT.
ip nat pool address-pool start-address
end-address { netmask mask |
prefix-length prefix-length }
or
ip nat pool pool-name { netmask netmask |
prefix-length prefix-length } [ type rotary ]
address start-ip end-ip [ match interface
interface ]
Defines a global IP address pool. For NAT,
generally multiple IP addresses are
defined mostly for intranet users. The
number of address pools to be defined
shall depend on the number of intranet
users.
access-list access-list-number permit
ip-address wildcard
Defines an ACL, so that only the
addresses matching this ACL are
translated.
ip nat inside source list access-list-number
{ [ pool address-pool ] | [ interface
interface-type interface-number ] }
overload
Defines the dynamic source address
translation relationship. The overload
parameter may be omitted. It is used only
to keep compatibility with mainstream
vendors' configuration .
Mandatory configuration. It is used to configure NAPT.
Marks the interface as connected to the
inside.
Marks the interface as connected to the
outside.
Optional configuration. It is used to configure static NAPT.
ip nat inside source static { UDP
local-address port | TCP local-address port }
global-address port [ permit-inside ]
Defines the static inside source address
translation relationship.
Optional configuration. It is used to configure dynamic NAPT.
ip nat pool address-pool start-address
end-address { netmask mask |
prefix-length prefix-length }
Defines a global IP address pool. For
NAPT, generally only one IP address is
defined.
access-list access-list-number permit
ip-address wildcard
Defines an ACL, so that only the
addresses matching this ACL are
translated.