HPE FlexNetwork HSR6800 Configuration Manual page 418
Comware 7 layer 3, ip services
Hide thumbs
Also See for FlexNetwork HSR6800:
- Security command reference (538 pages) ,
- Configuration manual (482 pages) ,
- Command reference manual (153 pages)
Table of Contents
Advertisement
[NAT2-acl-ipv4-basic-2000] quit
# Create address group 1.
[NAT2] nat address-group 1
# Add address 1.0.0.2 into the group.
[NAT2-nat-address-group-1] address 1.0.0.2 1.0.0.2
[NAT2-nat-address-group-1] quit
# Configure NAT on GigabitEthernet 2/1/1.
[NAT2] interface gigabitethernet 2/1/1
[NAT2-GigabitEthernet2/1/1] nat outbound 2000 address-group 1
[NAT2-GigabitEthernet2/1/1] quit
# Configure EIM for PAT to translate the source address and source port of packets matching
ACL 2000 from the same address and port to the same source public address and port.
[NAT2] nat mapping-behavior endpoint-independent acl 2000
Configuring NAT 3
# Configure NAT 3 in the same way that NAT 2 is configured. (Details not shown.)
Configuring NAT 4
1.
Configure IP addresses for the interfaces. (Details not shown.)
2.
Configure NAT internal servers on GigabitEthernet 2/1/1:
Allow external VAM clients to access VAM and AAA servers by using the public address
1.0.0.4.
Specify the source UDP port number as 18000 for both the primary and secondary VAM
servers.
Specify the UDP port number after NAT as 4001 for the primary server, and as 4002 for the
secondary server.
<NAT4> system-view
[NAT4] interface gigabitethernet 2/1/1
[NAT4-GigabitEthernet2/1/1] nat server protocol udp global current-interface 4001
inside 10.0.0.3 18000
[NAT4-GigabitEthernet2/1/1] nat server protocol udp global current-interface 4002
inside 10.0.0.4 18000
Verifying the configuration
# Display IPv4 address mapping information for all VAM clients registered with the primary VAM
server.
[PrimaryServer] display vam server address-map
ADVPN domain name: abc
Total private address mappings: 4
Group
0
0
0
0
# Display IPv4 address mapping information for all VAM clients registered with the secondary VAM
server.
[SecondaryServer] display vam server address-map
ADVPN domain name: abc
Total private address mappings: 4
Group
Private address
Public address
192.168.0.1
1.0.0.1
192.168.0.2
1.0.0.1
192.168.0.3
1.0.0.2
192.168.0.4
1.0.0.3
Private address
Public address
Type
Hub
Hub
Spoke
Spoke
Type
405
NAT
Holding time
Yes
0H 52M
7S
Yes
0H 47M 31S
Yes
0H 28M 25S
Yes
0H 19M 15S
NAT
Holding time
Advertisement
Table of Contents
Troubleshooting
