HPE FlexNetwork HSR6800 Configuration Manual page 163

Configure NAT to allow external host at 192.168.1.2 in the external network to use the domain name
to access the internal Web server.
Figure 62 Network diagram
Requirements analysis
To meet the network requirements, you must perform the following tasks:
•
Configure NAT Server to map the private IP address and port of the DNS server to a public IP
address and port. NAT Server allows the external host to access the internal DNS server for
domain name resolution.
•
Configure outbound dynamic NAT and enable ALG for DNS. The Web server's IP address is the
same as the external host's IP address. NAT with ALG can translate the Web server's private
address in the payload of the DNS response packet to a dynamically assigned public address.
•
Configure inbound dynamic NAT. The external host's IP address is the same as the Web
server's IP address. Inbound dynamic NAT can translate the external host's IP address into a
dynamically assigned public address.
•
Add a static route to the public IP address of the external host with GigabitEthernet 2/1/2 as the
output interface.
Configuration procedure
# Specify IP addresses for the interfaces on the router. (Details not shown.)
# Enable NAT with ALG for DNS.
<Router> system-view
[Router] nat alg dns
# Configure ACL 2000, and create a rule to permit packets only from subnet 192.168.1.0/24 to pass
through.
[Router] acl basic 2000
[Router-acl-ipv4-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Router-acl-ipv4-basic-2000] quit
# Create address group 1.
[Router] nat address-group 1
# Add address 202.38.1.2 to the address group.
[Router-address-group-1] address 202.38.1.2 202.38.1.2
[Router-address-group-1] quit
# Create address group 2.
[Router] nat address-group 2
# Add address 202.38.1.3 to the address group.
[Router-address-group-2] address 202.38.1.3 202.38.1.3
150