H3C MSR 2600 Configuration Manual page 166

Configure NAT so that:
• The public IP address 202.38.1.2 is used by external users to access the Web and FTP servers.
External users can use the public address or domain name of internal servers to access them.
•
Internal users can access the internal servers by using their domain names.
•
Figure 62 Network diagram
10.110.10.1/16
Web server
Host A
10.110.10.3/16
Configuration considerations
Configure NAT Server by mapping the internal IP addresses and port numbers of the internal
•
servers to a public address and port numbers so that external users can access the interval servers.
Configure NAT with DNS mapping and ALG so that the external IP address of the internal server in
•
the payload of the DNS response packet can be translated to the internal IP address.
Configuration procedure
# Specify IP addresses for the interfaces. (Details not shown.)
# Enable NAT with ALG and DNS.
<Router> system-view
[Router] nat alg dns
# Enter interface view of GigabitEthernet 1/2.
[Router] interface gigabitethernet 1/2
# Configure NAT Server to allow external hosts to access the internal Web server by using the address
202.38.1.2.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.2 inside 10.110.10.1
www
# Configure NAT Server to allow external hosts to access the internal FTP server by using the address
202.38.1.2.
[Router-GigabitEthernet1/2] nat server protocol tcp global 202.38.1.2 inside 10.110.10.2
ftp
# Enable outbound NAT with Easy IP on interface GigabitEthernet 1/2.
[Router-GigabitEthernet1/2] nat outbound
[Router-GigabitEthernet1/2] quit
# Configure two DNS mapping entries by mapping the domain name www.server.com of the Web
server to 202.38.1.2, and ftp.server.com of the FTP server to 202.38.1.2.
[Router] nat dns-map domain www.server.com protocol tcp ip 202.38.1.2 port www
[Router] nat dns-map domain ftp.server.com protocol tcp ip 202.38.1.2 port ftp
[Router] quit
10.110.10.2/16
FTP server
GE1/1
10.110.10.10/16
GE1/2
202.38.1.1/24
Internet
Router
151
202.38.1.4/24
DNS server
Host B
202.38.1.10/24