H3C S9500 Series Operation Manual page 138

Operation Manual – NAT
H3C S9500 Series Routing Switches
II. Network diagram
10.1.1.2/24
10.1.1.3/24
10.1.1.4/24
Figure 1-3 Network diagram for NAT configuration
III. Configuration procedure
# Create VLAN 100 and its virtual interface on the private network side, and configure
an IP address for the VLAN interface.
<H3C> system-view
System View: return to User View with Ctrl+Z
[H3C] vlan 100
[H3C-vlan100] port ethernet4/1/1
[H3C-vlan100] quit
[H3C] interface Vlan-interface 100
[H3C-Vlan-interface100] ip address 10.1.1.1 255.255.255.0
[H3C-Vlan-interface100] quit
# Create VLAN 200 and its virtual interface on the public network side, and configure an
IP address for the VLAN interface.
[H3C] vlan 200
[H3C-vlan200] port ethernet4/1/2
[H3C-vlan200] quit
[H3C] interface Vlan-interface 200
[H3C-Vlan-interface200] ip address 200.1.1.100 255.255.255.0
[H3C-Vlan-interface200] quit
# Configure ACL 3000.
[H3C] acl number 3000
[H3C-acl-adv-3000] rule permit ip source 10.1.1.1 0.0.0.255
[H3C-acl-adv-3000] quit
# Configure NAT address pool 0.
[H3C] nat address-group 0 200.1.1.101 200.1.1.111
# Configure a NAT binding on VLAN-interface 200. The NAT LPU is located in slot 3.
VLAN 100
Ethernet4/1/1
10.1.1.1/24
Convergence Switch
1-17
Chapter 1 NAT Configuration
VLAN 200
Ethernet4/1/2
200.1.1.100/24
Internet
Switch A