Enabling Nat Alg; Configuring Nat Filtering - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU
l nat static protocol { tcp | udp } global global-address global-port inside host-address
l nat static [ protocol { protocol-number | icmp | tcp | udp } ] global global-address
Static NAT is configured.
----End

3.3.7 Enabling NAT ALG

Errors may occur when NAT translates protocol packets encapsulated in IP data packets. The
NAT ALG function ensures that the protocol packets are translated successfully.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
nat alg { all | dns | ftp | rtsp | sip } enable
The NAT ALG function is enabled.
After the NAT ALG function is enabled for an application protocol, packets of the application
protocol can traverse the NAT server. The application protocol cannot work without the NAT
ALG function.
In the command, all indicates that NAT traversal applies to the DNS, FTP, SIP, and RTSP
protocols.
----End

3.3.8 Configuring NAT Filtering

A NAT device filters the traffic from external network to internal network. After an internal host
sends an access request to an external host, the external host transmits traffic to the internal host.
The NAT device filters the traffic sent to the internal host.
Context
NAT filtering has the following modes:
l
l
l
Issue 01 (2012-03-15)
[ host-port ] [ vpn-instance vpn-instance-name ] [ netmask mask ] [ description
description ]
inside host-address [ vpn-instance vpn-instance-name ] [ vpn-instance vpn-instance-
name ] [ netmask mask ] [ description description ]
NOTE
When configuring static NAT, ensure that global-address and host-address are different from interface IP
addresses and IP addresses in the user address pool.
Endpoint-independent filtering
Address-dependent filtering
Address and port-dependent filtering
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
93