Example For Configuring Outbound Nat - Huawei S9700 Series Configuration Manual

S9700 Core Routing Switch
Configuration Guide - SPU

3.4.3 Example for Configuring Outbound NAT

Networking Requirements
As shown in
the SPU with NAT enabled. To ensure intranet security, the SPU replaces private IP addresses
IP addresses on the network segment 192.168.20.0 with in the public IP addresses
(202.169.10.100 to 202.169.10.200) when hosts of company A access servers on the WAN.
Users of company B access the FTP server on the WAN through the SPU with NAT enabled.
To ensure security of the intranet and save IP addresses, the SPU replaces private IP addresses
on the network segment 10.0.0.0 with the public IP address pool (202.169.10.80 to
202.169.10.83) and port number when hosts of company B access servers on the WAN.
The SPU is installed in slot 5 of the S9700, and traffic is imported from the S9700 to the SPU
through GE 2/0/1 and GE 2/0/2.
Figure 3-6 Networking diagram for outbound NAT configuration
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
Issue 01 (2012-03-15)
#
interface XGigabitEthernet5/0/1
eth-trunk 1
#
return
Figure 3-6, users of company A access the WWW servers on the WAN through
Company A
PC 1...PC n
192.168.20.2
Import flows from the S9700 to the SPU.
Configure outbound NAT.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
XGE 5/0/0
Eth-Trunk1.1
Eth-Trunk1.2
XGE 5/0/1
GE 2/0/1
VLAN 101
GE 2/0/3
Switch
VLAN 103
VPN Company B
PC 1...PC n
10.0.0.2/24
3 NAT Configuration
VLAN 101
VLAN 102
GE 2/0/2
VLAN 102
202.169.10.2/24
104