Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
[SPU-acl-basic-2000] rule 5 permit source 192.168.20.0 0.0.0.255
[SPU-acl-basic-2000] quit
[SPU] acl 2001
[SPU-acl-basic-2001] rule 5 permit source 10.0.0.0 0.0.0.255 vpn-instance vpn_b
[SPU-acl-basic-2000] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] nat outbound 2000 address-group 1 no-pat
[SPU-Eth-Trunk1.2] nat outbound 2001 address-group 2
[SPU-Eth-Trunk1.2] quit
Step 3 Verify the configuration.
Run the display nat outbound [ acl acl-number | address-group group-index | interface
{ xgigabitEthernet | eth-trunk } interface-number.subnumber ] command on the SPU. The
following information is displayed:
[SPU] display nat outbound
NAT Outbound Information:
-----------------------------------------------------------------
Interface
-----------------------------------------------------------------
Eth-Trunk1.2
Eth-Trunk1.2
-----------------------------------------------------------------
Total : 2
----End
Configuration Files
l
Issue 01 (2012-03-15)
Configuration file of the SPU
#
sysname SPU
#
ip vpn-instance vpn_b
route-distinguisher 0:1
#
acl number 2000
rule 5 permit source 192.168.20.0 0.0.0.255
#
acl number 2001
rule 5 permit source 10.0.0.0 0.0.0.255 vpn-instance vpn_b
#
nat address-group 1 202.169.10.100 202.169.10.200
nat address-group 2 202.169.10.80 202.169.10.83
#
interface Eth-Trunk1
#
interface Eth-Trunk1.1
control-vid 101 dot1q-termination
dot1q termination vid 101
ip address 192.168.20.1 255.255.255.0
arp broadcast enable
#
interface Eth-Trunk1.2
control-vid 102 dot1q-termination
dot1q termination vid 102
ip address 202.169.10.1 255.255.255.0
arp broadcast enable
nat outbound 2000 address-group 1 no-pat
nat outbound 2001 address-group 2
#
interface Eth-Trunk1.3
control-vid 103 dot1q-termination
dot1q termination vid 103
ip binding vpn-instance vpn_b
ip address 10.0.0.1 255.255.255.0
arp broadcast enable
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Acl
Address-group/IP
2000
2001
3 NAT Configuration
Type
1
no-pat
2
pat
106
Advertisement
Table of Contents
