Huawei quidway s7700 Configuration Manual page 108

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
2.
Step 2 Configure the internal server on the SPU.
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] nat server protocol tcp global 202.169.10.5 www inside
192.168.20.2 8080
[SPU-Eth-Trunk1.2] nat server protocol tcp global 202.169.10.33 ftp inside 10.0.0.3
ftp vpn-instance vpn_b
Step 3 On the SPU, enable the NAT ALG function for FTP.
[SPU] nat alg ftp enable
Step 4 Verify the configuration.
Run the display nat server [ global global-address | inside host-address [ vpn-instance vpn-
instance-name ] | interface interface-type interface-number.subnumber ] command on the SPU.
The following information is displayed:
[SPU] display nat server
Nat Server Information:
Interface
Issue 01 (2011-07-15)
[S7700-XgigabitEthernet5/0/0] quit
[S7700] interface XGigabitEthernet5/0/1
[S7700-XgigabitEthernet5/0/1] eth-trunk 1
[S7700-XgigabitEthernet5/0/1] quit
On the SPU, set IP addresses of interfaces and add interfaces to VLANs.
<SPU> system-view
[SPU] interface Eth-Trunk 1
[SPU-Eth-Trunk1] quit
[SPU] interface Eth-Trunk 1.1
[SPU-Eth-Trunk1.1] control-vid 101 dot1q-termination
[SPU-Eth-Trunk1.1] dot1q termination vid 101
[SPU-Eth-Trunk1.1] ip address 192.168.20.1 255.255.255.0
[SPU-Eth-Trunk1.1] arp broadcast enable
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] control-vid 102 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 102
[SPU-Eth-Trunk1.2] ip address 202.169.10.1 255.255.255.0
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
[SPU] ip vpn-instance vpn_b
[SPU-vpn-instance-vpn_b] route-distinguisher 0:1
[SPU-vpn-instance-vpn_b] quit
[SPU] interface Eth-Trunk 1.3
[SPU-Eth-Trunk1.3] control-vid 103 dot1q-termination
[SPU-Eth-Trunk1.3] dot1q termination vid 103
[SPU-Eth-Trunk1.3] ip binding vpn-instance vpn_b
[SPU-Eth-Trunk1.3] ip address 10.0.0.1 255.255.255.0
[SPU-Eth-Trunk1.3] arp broadcast enable
[SPU-Eth-Trunk1.3] quit
[SPU] ip route-static vpn-instance vpn_b 0.0.0.0 0.0.0.0 Eth-Trunk 1.2
202.169.10.2
[SPU] interface XGigabitEthernet0/0/1
[SPU-XGigabitEthernet0/0/1] eth-trunk 1
[SPU-XGigabitEthernet0/0/1] quit
[SPU] interface XGigabitEthernet0/0/2
[SPU-XGigabitEthernet0/0/2] eth-trunk 1
[SPU-XGigabitEthernet0/0/2] quit
: Eth-Trunk1.2
Global IP/Port : 202.169.10.5/80(www)
Inside IP/Port : 192.168.20.2/8080
Protocol : 6(tcp)
VPN instance-name : ----
Global IP/Port : 202.169.10.33/21(ftp)
Inside IP/Port : 10.0.0.3/21(ftp)
Protocol : 6(tcp)
VPN instance-name : vpn_b
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
97