Example For Configuring Outbound Nat - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU
l

3.4.3 Example for Configuring Outbound NAT

Networking Requirements
As shown in
enabled on the SPU to access the Web server on the WAN. To ensure the security of the intranet
of company A, you need to replace IP addresses in the public address pool (202.169.10.100 to
202.169.10.200) with IP addresses of hosts of company A on the network segment 192.168.20.0
so that hosts of company A can access servers on the WAN.
The intranet of company B is connected to the WAN through NAT enabled on the SPU to access
the FTP server on the WAN. On the VPN, public IP addresses of company B is insufficient. To
ensure the security of the intranet of company B, you need to replace IP addresses in the public
address pool (202.169.10.80 to 202.169.10.83) with IP addresses of hosts of company A on the
network segment 10.0.0.0 so that hosts of company B can access servers on the WAN.
The SPU is installed in slot 5 on the S7700 and GE 2/0/1 and GE 2/0/2 import traffic to the SPU.
Issue 01 (2011-07-15)
control-vid 103 dot1q-termination
dot1q termination vid 103
ip binding vpn-instance vpn_b
ip address 10.0.0.1 255.255.255.0
arp broadcast enable
#
interface XGigabitEthernet0/0/1
eth-trunk 1
#
interface XGigabitEthernet0/0/2
eth-trunk 1
#
ip route-static vpn-instance vpn_b 0.0.0.0 0.0.0.0 Eth-Trunk 1.2 202.169.10.2
#
Return
Configuration file of the S7700
#
sysname S7700
#
vlan batch 101 to 103
#
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 101 to 103
#
interface GigabitEthernet2/0/1
port link-type trunk
port trunk allow-pass vlan 101
#
interface GigabitEthernet2/0/2
port link-type trunk
port trunk allow-pass vlan 102
#
interface GigabitEthernet2/0/3
port link-type trunk
port trunk allow-pass vlan 103
#
interface XGigabitEthernet5/0/0
eth-trunk 1
#
interface XGigabitEthernet5/0/1
eth-trunk 1
#
return
Figure 3-6, the intranet of company A is connected to the WAN through NAT
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
102