Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
The private IP address of the web server is 192.168.20.2:8080 and its public address is
202.169.10.5.
The intranet of company B also connects to the WAN through the SPU with NAT enabled.
Company B provides an FTP server in the VPN for users on the public network to access. The
private IP address of the FTP server is 10.0.0.3 and its public address is 202.169.10.33.
The SPU is installed in slot 5 of the S9700.
Figure 3-4 Networking diagram for NAT server configuration
192.168.20.2
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Procedure
Step 1 Import flows from the S9700 to the SPU.
1.
Issue 01 (2012-03-15)
Company A
Web server
Import flows from the S9700 to the SPU.
Configure the internal servers.
Enable the NAT ALG function for FTP.
NOTE
For more information about flow import, see
Configure flow import on the S9700.
<S9700> system-view
[S9700] vlan batch 101 to 103
[S9700] interface Eth-Trunk 1
[S9700-Eth-Trunk1] port link-type trunk
[S9700-Eth-Trunk1] port trunk allow-pass vlan 101 to 103
[S9700-Eth-Trunk1] quit
[S9700] interface GigabitEthernet2/0/1
[S9700-GigabitEthernet2/0/1] port link-type trunk
[S9700-GigabitEthernet2/0/1] port trunk allow-pass vlan 101
[S9700-GigabitEthernet2/0/1] quit
[S9700] interface GigabitEthernet2/0/2
[S9700-GigabitEthernet2/0/2] port link-type trunk
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
VLAN 101
XGE 5/0/0
Eth-Trunk 1.1
Eth-Trunk 1.2
XGE 5/0/1
VLAN 102
GE 2/0/1
GE 2/0/2
VLAN 101
VLAN 102
GE 2/0/3
Switch
VLAN 103
Company B
FTP server
10.0.0.3/24
1 SPU
Pre-Configuration.
3 NAT Configuration
202.169.10.2/24
97
Advertisement
Table of Contents
