Nat Hairpin In C/S Mode Configuration Example - HPE FlexNetwork MSR Series Comware 7 Layer 3 - Ip Services Configuration Manuals

Protocol: TCP(6)
Inbound interface: GigabitEthernet2/0/2
Responder:
Source
Destination IP/port: 202.38.1.3/1025
DS-Lite tunnel peer: -
VPN instance/VLAN ID/Inline ID: -/-/-
Protocol: TCP(6)
Inbound interface: GigabitEthernet2/0/1
State: TCP_ESTABLISHED
Application: HTTP
Start time: 2012-08-15 14:53:29
Initiator->Responder:
Responder->Initiator:
Total sessions found: 1

NAT hairpin in C/S mode configuration example

Network requirements
As shown in
external users. The private network uses two public IP addresses 202.38.1.1 and 202.38.1.2.
Configure NAT hairpin in C/S mode to allow external and internal users to access the internal FTP
server by using public IP address 202.38.1.2.
Figure 70 Network diagram
192.168.1.2/24
Host A
Host B
192.168.1.3/24
Requirements analysis
To allow external hosts to access the internal FTP server by using a public IP address, configure NAT
Server on the interface connected to the external network.
To allow internal hosts to access the internal FTP server by using a public IP address, perform the
following tasks:
•
Enable NAT hairpin on the interface connected to the internal network.
•
Configure outbound NAT on the interface where NAT Server is configured. The destination
address is translated by matching the NAT Server. The source address is translated by
matching the outbound NAT.
IP/port: 192.168.1.2/8080
Figure 70, the internal FTP server at 192.168.1.4/24 provides services for internal and
GE2/0/1
192.168.1.1/24
FTP server
192.168.1.4/24
TTL: 3597s
7 packets 308 bytes
5 packets 312 bytes
GE2/0/2
202.38.1.1/24
Router
175
Internet