Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Figure 3-7 Networking diagram for twice NAT configuration
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Procedure
Step 1 Import flows from the S9700 to the SPU.
1.
Issue 01 (2012-03-15)
VPN
Company A
PC 1
192.168.20.2/24
PC 1
192.168.20.2/24
Import flows from the SPU to the SPU.
Configure the mapping between the overlapping address pool and the temporary address
pool.
Configure outbound NAT.
Configure flow import on the S9700.
<S9700> system-view
[S9700] vlan batch 101 to 103
[S9700] interface Eth-Trunk 1
[S9700-Eth-Trunk1] port link-type trunk
[S9700-Eth-Trunk1] port trunk allow-pass vlan 101 to 103
[S9700-Eth-Trunk1] quit
[S9700] interface GigabitEthernet2/0/1
[S9700-GigabitEthernet2/0/1] port link-type trunk
[S9700-GigabitEthernet2/0/1] port trunk allow-pass vlan 101
[S9700-GigabitEthernet2/0/1] quit
[S9700] interface GigabitEthernet2/0/2
[S9700-GigabitEthernet2/0/2] port link-type trunk
[S9700-GigabitEthernet2/0/2] port trunk allow-pass vlan 102
[S9700-GigabitEthernet2/0/2] quit
[S9700] interface GigabitEthernet2/0/3
[S9700-GigabitEthernet2/0/3] port link-type trunk
[S9700-GigabitEthernet2/0/3] port trunk allow-pass vlan 103
[S9700-GigabitEthernet2/0/3] quit
[S9700] interface XGigabitEthernet5/0/0
[S9700-XgigabitEthernet5/0/0] eth-trunk 1
[S9700-XgigabitEthernet5/0/0] quit
[S9700] interface XGigabitEthernet5/0/1
[S9700-XgigabitEthernet5/0/1] eth-trunk 1
[S9700-XgigabitEthernet5/0/1] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
VLAN 101
XGE 5/0/0
Eth-Trunk 1.1
Eth-Trunk 1.2
XGE 5/0/1
VLAN 103
GE 2/0/1
GE 2/0/3
VLAN 101
GE 2/0/2
Switch
VLAN 102
VPN
Company B
PC 2
3 NAT Configuration
www.Server.com
192.168.20.2/24
VLAN 103
202.169.10.2/24
DNS server
Host A
108
Advertisement
Table of Contents
