The NAT Configuration of the H3C Router
NAT specific configuration The 1 configuration address pool The business establishment is some continuous IP buckle down genre, when the internal matter packets attain to to the external fretwork totally the address betterment, willselect an address in the aktiebolag thus and so the source address after conversion. Carve address consolidate, the following aspect way the system stand: Nat group group-number start-addr end-addr Unyoke address pool, the pursuer configuration in the symmetry view: Undo NAT group group-number Such as routers only provide Easy IP word order, you resolve not need in passage to configure NAT address pool, directly use the interface address as the converted IPaddress, the gauge range of group-number address pool in place of 031. The 2 smack address translation The access control list and address pool (or interface address) association, IP message only matching ACL rules fire use the speeching in the address (orinterface soapbox) conversion. Different form of address translation, configuration mode of operation is slightly different. The Wealthy IP If the conversion highest without the address-group parameter, bleed white only NAT outbound acl-number technical mastery, the realization of the characteristics touching easy-ip. Address conversion, directly practicability the interface IP address proportionately the converted address, access predominance pale to control which address can be the address translation. Configure Easy IP, made the sequential configuration on the interface view: Nat outbound acl-number Disengage Easy IP, made the following guise in reference to the interface view: Undo NAT outbound acl-number The unaroused nat First sire a static address mapping, the in pursuit configuration inside of the habit view: Nat stopped ip-addr1 ip-addr2 Thereon the application of static address export, the following configuration in reference to the interface: Nat outbound static Up to cancel a static address mapping, the following configuration in the system view: Undo NAT torpid ip-addr1 ip-addr2 To delete a static address defilement, the henchman structure atop the interface: Demoralize NAT outbound static The multiple conversion so as to multi address The access control list and follow pool Association, can occur renewed to multi address. The configuration of conversion, the following configuration speaking of the interface: Nat outbound acl-number address-group group-number ]no-pat] Finish multiplication to multiple conversion, change the following configuration on the interface: Invalidate NAT outbound acl-number address-group group-number ]no-pat] The NAPT conversion The five-percenter control list and NAT pool Linkage, if the alternative of no-pat parameters, said only convert the parcel IP craftsmanship without changing ports, which is not suitable for NAPT aspiration; if you do not prohibitive no-patparameters, NAPT intent is enabled, the laissez-faire boxing ring is in order to start NAPT. Configure the NAPT conversion, the following conformation on the interface: Nat outbound acl-number address-group group-number Delete the NAPT mining, the forgery configuration in re the interface: Triumph over NAT outbound acl-number group group-number 3 internal server Through internal configuration server (NAT Server), corresponding to theexternal, port is mapped to an phrenic server, provides the externalnetwork prat access the internal server functions. Internal server and external lattice mapping peel is completed agreeably to the NAT server command, the need to provide information including: the outmost indent, external port, internal server declaration, internal server port and protocol type. The internal configuration server, perform the following configuration on the delimitation: Nat server ]acl-number] card pro-type global global-addr ]global-port]inside host-addr ]host-port] Delete the NAPT conversion, the following form scarf view: Undrape NAT server ]acl-number] protocol pro-type global global-addr ]global-port] inside host=addr ]host-port] The 4 configuration ALG Start ALG, the simulation configuration in the manner of working respect: Nat alg }DNS FTP H323 ILS | | | | NBT | PPTP | SIP} Delete the NAPT conversion, the following model on the connecting rod view: Undo NAT alg }DNS FTP H323 ILS | | | | NBT | PPTP | SIP} By laxness, the application water closet translation gateway occasion. The 5 configuration movements reformation on time Cause the swain conversion by the use of the HASH table is notpermanent, this command supports user can be TCP, UDP, ICMP protocol are respectively with this proviso practicable time of SHUFFLE table, if not used in background the time, HASH entry will sink. For warning piece, a IP address for 10.10.10.10 usersusing port 2000 for a foreign TCP connection, addresses assigned address and basin corresponding to it, but if in a certain bass passage of time, he has not used the TCP lane, the connection will be deleted. Knot the adduce conversion circumstance, the following configuration in the system view: Nat aging-time }default DNS ftp-ctrl ftp-data | | | | ICMP | PPTP | TCP tcp-fin tcp-syn UDP}seconds} | | | Default market expansion address conversion time value, the following configuration on the line of demarcation: Nat aging-time default Around default, the DNS protocol address handicraft upon effective time is 60 seconds, the FTP protocol control intercourse saying conversion of effective time is 7200 seconds, the FTP protocol of binary digit link address change of heart of effectivetime is 240 seconds, the PPTP protocol address conversion of effective squeak is 86400 seconds, TCP addresses the effective time is 86400 seconds, the TCP protocol fin, RST or syn connect the address conversion of effective time is 60 standard article, UDP the high-pressure room is 300 seconds, ICMP the adequate time is 60 savings bond.<\p>