Configuring Inbound Dynamic Nat - H3C MSR 2600 Configuration Manual

Step
2. Configure an address
group and enter its
view.
3. Add a group member
to the address group.
4. Enter interface view.
5. Configure outbound
dynamic NAT.
6. (Optional.) Configure
the mapping behavior
for PAT.

Configuring inbound dynamic NAT

To implement bidirectional NAT, you must use inbound dynamic NAT with outbound dynamic NAT, NAT
Server, or outbound static NAT.
The source IP address of a received packet that matches the ACL permit statement is translated into
•
an address in the address group.
The keyword add-route enables the device to add a route automatically to the NATed address when
•
a packet matches an inbound dynamic NAT rule. The output interface for the automatically added
route is the NAT interface, and the next hop is the source address before translation. If you do not
specify this keyword, you must add the route manually. H3C recommends that you manually specify
a route because it takes time to add routes automatically.
• The reversible keyword matches the destination IP address in the first packet from the private
network to the public network against existing NO-PAT entries, and translates the destination
address into the NAT address in a matching NO-PAT entry.
Inbound dynamic NAT does not support Easy IP.
To configure inbound dynamic NAT:
Step
1. Enter system view.
Command
nat address-group group-number
address start-address end-address
interface interface-type
interface-number
•
Configure NO-PAT:
nat outbound [ acl-number ]
address-group group-number
[ vpn-instance vpn-instance-name ]
no-pat [ reversible ]
•
Configure PAT:
nat outbound [ acl-number ]
[ address-group group-number ]
[ vpn-instance vpn-instance-name ]
[ port-preserved ]
nat mapping-behavior
endpoint-independent [ acl
acl-number ]
Command
system-view
122
Remarks
By default, no address group exists.
By default, no group member exists.
You can add multiple members to an
address group.
The IP addresses of the members must
not overlap.
N/A
By default, outbound dynamic NAT is
not configured.
You can configure multiple outbound
dynamic NAT rules on an interface.
The default mapping behavior is
Address and Port-Dependent
Mapping.
This command takes effect only on
outbound dynamic NAT for PAT.
Remarks
N/A