Creating Auto-Constrain Nat Rules; Advanced Rule Matching - Extreme Networks Summit 200-24 Installation And User Manual

Network Address Translation (NAT)

Creating Auto-Constrain NAT Rules

To create auto-constrain NAT rules, use the following command:
config nat [add | delete] vlan <outside_vlan> map source [any | <ipaddress> [/<bits> |
<netmask>]] to <ip> [/<mask> | <netmask> | - <ipaddress>] {[tcp | udp | both]
auto-constrain}
This rule uses auto-constrain NAT. Remember that each inside IP address will be restricted in the
number of simultaneous connections. Most installations should use portmap mode.
Auto-Constrain Example
config nat add out_vlan_3 map source 192.168.3.0/24 to 216.52.8.64/32 both
auto-constrain

Advanced Rule Matching

By default, NAT rules only match connections based on the source IP address of the outgoing packets.
Using the and
L4-port destination
it only applied to specific TCP/UDP Layer 4 port numbers, or specific outside destination IP addresses.
NOTE
Once a single rule is matched, no other rules are processed.
Destination Specific NAT
config nat [add | delete] vlan <outside_vlan> map source [any | <ipaddress> [/<bits> |
<netmask>]] {destination <ipaddress/mask>} to <ipaddress> [/<mask> | <netmask> |
- <ipaddress>]
The addition of the
destination
NAT rule to be applied to only packets with a specific destination IP address.
L4-Port Specific NAT
The addition of the
L4-port
rule to be applied only to packets with a specific L4 source or destination port. If you use the L4-port
command after the source IP/mask, the rule will match only if the port(s) specified are the source
L4-ports. If you use the L4-port command after the destination IP/mask, the rule will match only if the
port(s) specified are the destination L4-ports. Both options may be used together to further limit the
rule.
126
keywords, you can further limit the scope of the NAT rule so that
optional keyword after the source IP address and mask allows the
optional keyword after the source IP address and mask allows the NAT
Summit 200 Series Switch Installation and User Guide