Configuring An Internal Server; Configuring Static Nat - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU

3.3.5 Configuring an Internal Server

Deploying a server on the private network improves security of the server and prevents attacks
from the public network. Users on the private and public networks can access the server.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Step 3 Run:
l nat server protocol { tcp | udp } global global-address global-port inside host-address
l nat server [ protocol { protocol-number | icmp | tcp | udp } ] global global-address
An internal server is configured.
Users on the public network can access the configured internal server. When a host on the public
network sends a connection request to the public address (global-address) of the internal server,
NAT translates the destination address of the request to a private address (host-address). The
SPU then forwards the request the server.
----End

3.3.6 Configuring Static NAT

Static NAT maps a private address to a public address. Static NAT does not save public addresses
but shields the private network topology.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
Step 3 Run:
Issue 01 (2012-03-15)
[ host-port ] [ vpn-instance vpn-instance-name ] [ description description ]
inside host-address [ vpn-instance vpn-instance-name ] [ vpn-instance vpn-instance-
name ] [ description description ]
NOTE
When configuring an internal server, ensure that global-address and host-address are different from
interface IP addresses and IP addresses in the user address pool.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
92