HP FlexNetwork MSR2003 Configuration Manual page 428

[NAT1-GigabitEthernet2/0/1] quit
# Enable NAT hairpin on GigabitEthernet 2/0/2.
[NAT1] interface gigabitethernet 2/0/2
[NAT1-GigabitEthernet2/0/2] nat hairpin enable
[NAT1-GigabitEthernet2/0/2] quit
Configuring NAT 2
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure NAT internal servers:
# Configure ACL 2000 to permit packets sourced from 10.0.0.0/24.
<NAT2> system-view
[NAT2] acl number 2000
[NAT2-acl-basic-2000] rule permit source 10.0.0.0 0.0.0.255
[NAT2-acl-basic-2000] quit
# Create address group 1.
[NAT2] nat address-group 1
# Add address 1.0.0.2 into the group.
[NAT2-nat-address-group-1] address 1.0.0.2 1.0.0.2
[NAT2-nat-address-group-1] quit
# Configure NAT on GigabitEthernet 2/0/1.
[NAT2] interface gigabitethernet 2/0/1
[NAT2-GigabitEthernet2/0/1] nat outbound 2000 address-group 1
[NAT2-GigabitEthernet2/0/1] quit
# Configure EIM for PAT to translate the source address and source port of packets matching
ACL 2000 from the same address and port to the same source public address and port.
[NAT2] nat mapping-behavior endpoint-independent acl 2000
Configuring NAT 3
# Configure NAT 3 in the same way that NAT 2 is configured. (Details not shown.)
Configuring NAT 4
1. Configure IP addresses for the interfaces. (Details not shown.)
2. Configure NAT internal servers on GigabitEthernet 2/0/1:
Allow external VAM clients to access VAM and AAA servers by using the public address
1.0.0.4.
Specify the source UDP port number as 18000 for both the primary and secondary VAM
servers.
Specify the UDP port number after NAT as 4001 for the primary server, and as 4002 for the
secondary server.
<NAT4> system-view
[NAT4] interface gigabitethernet 2/0/1
[NAT4-GigabitEthernet2/0/1] nat server protocol udp global current-interface 4001
inside 10.0.0.3 18000
[NAT4-GigabitEthernet2/0/1] nat server protocol udp global current-interface 4002
inside 10.0.0.4 18000
Verifying the configuration
# Display IPv4 address mapping information for all VAM clients registered with the primary VAM
server.
[PrimaryServer] display vam server address-map
414