Configuring Object Group-Based Inbound Static Nat; Configuring Dynamic Nat; Configuration Restrictions And Guidelines - HPE FlexNetwork HSR6800 Configuration Manual

Step
4. Enter interface view.
5. Enable static NAT on the
interface.

Configuring object group-based inbound static NAT

Configure object group-based inbound static NAT to translate public IP addresses into private IP
addresses.
•
When the source address of a packet from the public network matches the public address
object group, the source address is translated into a private address in the private address
object group.
•
When the destination address of a packet from the private network matches the private address
object group, the destination address is translated into a public address in the public address
object group.
An IPv4 address object group used by an object group-based inbound static NAT mapping can only
contain a host object or a subnet object. Otherwise, the configuration does not take effect.
To configure object group-based inbound static NAT:
Step
1. Enter system view.
2. Configure an object
group-based inbound static
NAT mapping.
3. Return to system view.
4. Enter interface view.
5. Enable static NAT on the
interface.

Configuring dynamic NAT

Dynamic NAT translates a group of private IP addresses into a smaller number of public addresses.
You can specify an address group (or the IP address of an interface) and an ACL to implement
dynamic NAT.

Configuration restrictions and guidelines

When you configure dynamic NAT, follow these restrictions and guidelines:
•
You can configure multiple inbound or outbound dynamic NAT rules.
Command
interface interface-type
interface-number
nat static enable
Command
system-view
nat static inbound object-group
global-object-group-name
[ vpn-instance
global-vpn-instance-name ]
object-group
local-object-group-name
[ vpn-instance
local-vpn-instance-name ] [ acl
{ ipv4-acl-number | name
ipv4-acl-name } [ reversible ] ]
[ disable ]
quit
interface interface-type
interface-number
nat static enable
124
Remarks
N/A
By default, static NAT is disabled.
Remarks
N/A
By default, no mappings exist.
If you specify the acl keyword,
NAT processes only packets
permitted by the ACL.
N/A
N/A
By default, static NAT is disabled.