H3C MSR 2600 Configuration Manual page 162

Configuration considerations
This is a typical application of twice NAT. Both the source and destination addresses of packets between
the two VPNs need to be translated. Configure static NAT on both interfaces that connects the VPNs on
the NAT device.
Configuration procedure
# Specify VPN instances and IP addresses for the interfaces. (Details not shown.)
# Configure a static outbound NAT mapping between 192.168.1.2 in vpn 1 and 172.16.1.2 in vpn 2.
<Router> system-view
[Router] nat static outbound 192.168.1.2 vpn-instance vpn1 172.16.1.2 vpn-instance vpn2
# Configure a static outbound NAT mapping between 192.168.1.2 in vpn 2 and 172.16.2.2 in vpn 1.
[Router] nat static outbound 192.168.1.2 vpn-instance vpn2 172.16.2.2 vpn-instance vpn1
# Enable static NAT on interface GigabitEthernet 1/2.
[Router] interface gigabitethernet 1/2
[Router-GigabitEthernet1/2] nat static enable
[Router-GigabitEthernet1/2] quit
# Enable static NAT on interface GigabitEthernet 1/1.
[Router] interface gigabitethernet 1/1
[Router-GigabitEthernet1/1] nat static enable
[Router-GigabitEthernet1/1] quit
Verifying the configuration
After completing the configuration, Host A and Host B can access each other. The NAT address for Host
A is 172.16.1.2 and that for Host B is 172.16.2.2.
# Display all NAT configuration and statistics.
[Router] display nat all
Static NAT mappings:
There are 2 outbound static NAT mappings.
IP-to-IP:
Local IP
Global IP : 172.16.1.2
Local VPN : vpn1
Global VPN: vpn2
IP-to-IP:
Local IP
Global IP : 172.16.2.2
Local VPN : vpn2
Global VPN: vpn1
Interfaces enabled with static NAT:
There are 2 interfaces enabled with static NAT.
Interface: GigabitEthernet1/1
NAT logging:
Log enable : Disabled
: 192.168.1.2
: 192.168.1.2
GigabitEthernet1/2
147