Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
2.
Step 2 Configure DNS mapping on the SPU so that the host A IP address returned from the DNS server
to PC1 is translated to a unique temporary address.
[SPU] nat alg dns enable
[SPU] nat dns-map www.Server.com 192.168.20.2 80 tcp
Step 3 Configure the mapping between the overlapping address pool and the temporary address pool
on the SPU.
[SPU] nat overlap-address 0 192.168.20.2 202.169.100.2 pool-length 254 inside-vpn-
instance vpna
Step 4 Configure a static route from the temporary address pool to Eth-Trunk 1.2 on the SPU.
[SPU] ip route-static vpn-instance vpna 202.169.100.2 24 Eth-Trunk1.2 202.169.10.2
Step 5 On the outbound sub-interface Eth-Trunk1.2 of the SPU, configure outbound NAT for host A.
1.
2.
3.
Issue 01 (2012-03-15)
On the SPU, configure IP addresses for interfaces and add interfaces to VLANs.
<SPU> system-view
[SPU] interface Eth-Trunk 1
[SPU-Eth-Trunk1] quit
[SPU] ip vpn-instance vpna
[SPU-vpn-instance-vpna] route-distinguisher 1:1
[SPU-vpn-instance-vpna] quit
[SPU] ip vpn-instance vpnb
[SPU-vpn-instance-vpnb] route-distinguisher 2:2
[SPU-vpn-instance-vpnb] quit
[SPU] interface Eth-Trunk 1.1
[SPU-Eth-Trunk1.1] control-vid 101 dot1q-termination
[SPU-Eth-Trunk1.1] dot1q termination vid 101
[SPU-Eth-Trunk1.1] ip binding vpn-instance
[SPU-Eth-Trunk1.1] ip address 192.168.20.1 255.255.255.0
[SPU-Eth-Trunk1.1] arp broadcast enable
[SPU-Eth-Trunk1.1] quit
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] control-vid 103 dot1q-termination
[SPU-Eth-Trunk1.2] dot1q termination vid 103
[SPU-Eth-Trunk1.2] ip address 202.169.10.1 255.255.255.0
[SPU-Eth-Trunk1.2] arp broadcast enable
[SPU-Eth-Trunk1.2] quit
[SPU] interface Eth-Trunk 1.3
[SPU-Eth-Trunk1.3] control-vid 102 dot1q-termination
[SPU-Eth-Trunk1.3] dot1q termination vid 102
[SPU-Eth-Trunk1.3] ip binding vpn-instance vpnb
[SPU-Eth-Trunk1.3] ip address 192.168.25.1 255.255.255.0
[SPU-Eth-Trunk1.3] arp broadcast enable
[SPU-Eth-Trunk1.3] quit
[SPU] interface XGigabitEthernet0/0/1
[SPU-XGigabitEthernet0/0/1] eth-trunk 1
[SPU-XGigabitEthernet0/0/1] quit
[SPU] interface XGigabitEthernet0/0/2
[SPU-XGigabitEthernet0/0/2] eth-trunk 1
[SPU-XGigabitEthernet0/0/2] quit
Create an ACL and configure an ACL rule to allow packets of host A to pass through.
[SPU] acl 3180
[SPU--acl-adv-3180] rule permit ip vpn-instance vpna source 192.168.20.1
0.0.0.255
[SPU--acl-adv-3180] quit
Configure the NAT address pool for outbound NAT.
[SPU] nat address-group 1 160.160.0.2 160.160.0.254
On the outbound sub-interface Eth-Trunk1.2, configure outbound NAT for host A.
[SPU] interface Eth-Trunk 1.2
[SPU-Eth-Trunk1.2] nat outbound 3180 address-group 1
[SPU-Eth-Trunk1.2] quit
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 NAT Configuration
vpna
109
Advertisement
Table of Contents
