H3C MSR 2600 Configuration Manual page 152

# Add address 202.38.1.3 to the group.
[Router-nat-address-group-1] address 202.38.1.3 202.38.1.3
[Router-nat-address-group-1] quit
# Configure NAT Server on interface GigabitEthernet 1/2 to map the address 202.38.1.1 to 10.1 10.10.3.
External users can access the internal DNS server.
[Router] interface gigabitethernet 1/2
[Router-GigabitEthernet1/2] nat server protocol udp global 202.38.1.2 inside 10.110.10.3
domain
# Enable outbound NO-PAT on interface GigabitEthernet 1/2, use the address in address group 1 to
translate the internal address in DNS response payload, and allow reversible NAT.
[Router-GigabitEthernet1/2] nat outbound 2000 address-group 1 no-pat reversible
[Router-GigabitEthernet1/2] quit
Verifying the configuration
After completing the configurations, Host on the external network can access the internal Web server by
using the server's domain name.
# Display all NAT configuration and statistics.
[Router] display nat all
NAT address group information:
There are 1 NAT address groups.
Group Number
1
NAT outbound information:
There are 1 NAT outbound rules.
Interface: GigabitEthernet1/2
ACL: 2000
NO-PAT: Y
NAT internal server information:
There are 1 internal servers.
Interface: GigabitEthernet1/2
Protocol: 17(UDP)
Global IP/port: 202.38.1.2/53
Local
NAT logging:
Log enable : Disabled
Flow-begin : Disabled
Flow-end
Flow-active: Disabled
NAT mapping behavior:
Mapping mode: Address and Port-Dependent
ACL
NAT ALG:
DNS: Enabled
Start Address
202.38.1.3
Address group: 1
Reversible: Y
IP/port: 10.110.10.3/53
: Disabled
: ---
End Address
202.38.1.3
Port-preserved: N
137