Example For Configuring Static Nat - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU

3.4.2 Example for Configuring Static NAT

Networking Requirements
As shown in
enabled on the SPU. Company A provides two Web servers for users on the public network who
want to access the intranet of company A. The private IP addresses of Web servers are in the
range of 192.168.20.2:8080 to 192.168.20.3:8080 (the network segment is 192.168.20.2 and the
mask is 255.255.255.254). The public addresses are in the range of 202.169.10.2 to 202.169.10.3
(the network segment is 202.169.10.2 and the mask is 255.255.255.254). A private address maps
a public address.
The intranet of company B is connected to the WAN through NAT enabled on the SPU. On the
VPN, company B provides four FTP servers for users on the public network who want to access
the intranet of company B. The private IP addresses of FTP servers are in the range of 10.0.0.0
to 10.0.0.3 (the network segment is 10.0.0.0 and the mask is 255.255.255.252). The public
addresses are in the range of 202.169.10.32 to 202.169.10.35 (the network segment is
202.169.10.32 and the mask is 255.255.255.252).
The SPU is installed in slot 5 on the S7700.
Figure 3-5 Networking diagram for configuring static NAT
192.168.20.2192.168.20.3
Issue 01 (2011-07-15)
interface GigabitEthernet2/0/3
port link-type trunk
port trunk allow-pass vlan 103
#
interface XGigabitEthernet5/0/0
eth-trunk 1
#
interface XGigabitEthernet5/0/1
eth-trunk 1
#
return
Figure 3-5, the intranet of company A is connected to the WAN through NAT
Web server
Company A
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
XGE 5/0/0
Eth-Trunk 1.2
XGE 5/0/1
VLAN 102
GE 2/0/1
VLAN 101
GE 2/0/3
VLAN 103
Company B
FTP server
10.0.0.0-3/24
3 NAT Configuration
VLAN 101
Eth-Trunk 1.1
GE 2/0/2
VLAN 102
202.169.10.2/24
Switch
99