Dynamic Source Nat - Alcatel-Lucent 7705 Configuration Manual

Configuring IP Router Parameters

Dynamic Source NAT

Source NAT can be used to create sessions from inside a private network to an outside
(public) network. If an arriving IP packet on the 7705 SAR matches the NAT policy rules, an
internal mapping is created between the inside (private) source IP address/source port and an
outside (public) source IP address/source port. The public IP address and port are configured
in the NAT pool policy.
NAT automatically creates a reverse mapping for arriving traffic from the public domain to
the private domain for the same connection. This reverse mapping is based on an outside
destination IP address and destination port to an inside destination IP address and destination
port.
50
Table 6: NAT Policy Attributes and Packet Matching Criteria (Continued)
Attribute
Destination IP
Source Port
Destination Port
ICMP Code
ICMP Type
Profile
Concurrent Sessions
Description
Specifies an explicit destination IP
address for the match criteria of the rule.
Packets destined for the specified IP
address are evaluated for a match.
Specifies a source port to match in the IP
packets when the match attribute is
specified as protocol ID
Specifies a destination port to match in
the IP packets when the match attribute is
specified as protocol ID
Specifies the ICMP code when the
protocol ID specified for the match
attribute of the rule is set to ICMP
Specifies the ICMP type when the
protocol ID specified for the match
attribute of the rule is set to ICMP
Specifies the profile ID applied to the
policy
Specifies the number of concurrent NAT
sessions that can be created under this
policy
7705 SAR OS Router Configuration Guide
CLI Command
dst-ip
src-port
dst-port
icmp-code
icmp-type
profile
concurrent-
sessions