Configuring An Internal Nat Server; Configuring Static Nat - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
Easy IP is configured.
----End

3.3.5 Configuring an Internal NAT Server

If a server is deployed on the private network, the security of the server can be improved and
attacks of users from the public network can be prevented. In addition, normal users can access
the server.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Step 3 Run:
l nat server protocol { tcp | udp } global global-address global-port inside host-address
l nat server [ protocol { protocol-number | icmp | tcp | udp } ] global global-address
The internal NAT server is configured.
After the internal NAT server is configured, users on the public network can access servers on
the private network. When a host on the public network sends a connection request to the public
address (global-address) of the internal NAT server, the NAT server translates the destination
address of the request to a private address (host-address). The request is then forwarded to the
server on the private network.
----End

3.3.6 Configuring Static NAT

Static NAT maps a private address to a public address. Static NAT cannot save public addresses,
but can shield the topology of the private network.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
Issue 01 (2011-07-15)
[ host-port ] [ vpn-instance vpn-instance-name ] [ description description ]
inside host-address [ vpn-instance vpn-instance-name ] [ description description ]
NOTE
When configuring the internal NAT server, ensure that global-address and host-address are different from
IP addresses of interfaces and IP addresses in the user address pool.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
91