H3C MSR 2600 Configuration Manual page 149

Figure 55 Network diagram
10.110.10.1/16
Web server 1
FTP server
10.110.10.3/16
Configuration procedure
# Specify IP addresses for the interfaces. (Details not shown.)
# Enter interface view of GigabitEthernet 1/2.
<Router> system-view
[Router] interface gigabitethernet 1/2
# Configure NAT Server to allow external users to access the FTP server by using the address 202.38.1.1
and port 21.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.1 21 inside
10.110.10.3 ftp
# Configure NAT Server to allow external users to access the Web server 1 by using the address
202.38.1.1 and port 80.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.1 80 inside
10.110.10.1 www
# Configure NAT Server to allow external users to access the Web server 2 by using the address
202.38.1.1 and port 8080.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.1 8080 inside
10.110.10.2 www
# Configure NAT Server to allow external users to access the SMTP server by using the address
202.38.1.1 and port number defined by SMTP.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.1 smtp inside
10.110.10.4 smtp
[Router-GigabitEthernet1/2] quit
Verifying the configuration
After completing the configurations, Host on the external network can access the internal servers by using
the NAT addresses.
# Display all NAT configuration and statistics.
[Router] display nat all
NAT internal server information:
There are 4 internal servers.
Interface: GigabitEthernet1/2
Protocol: 6(TCP)
Global IP/port: 202.38.1.1/21
Local
10.110.10.2/16
Web server 2
GE1/1
10.110.10.10/16
SMTP server
10.110.10.4/16
IP/port: 10.110.10.3/21
GE1/2
202.38.1.1/24
Router
134
Internet
Host