Configuring Internal Server; Introduction To Internal Server; Configuring An Internal Server; Configuring Nat Log - 3Com MSR 50 Series Configuration Manual

1818 C 96: NAT C
HAPTER
Configuring Internal
Server
Introduction to Internal
Server
Configuring an Internal
Server

Configuring NAT Log

Introduction to NAT Log

ONFIGURATION
To do...
Enable NAPT and associate an ACL with an
IP address pool to translate both IP address
and port number.
To configure an internal server, you need to map an external IP address and port to
the internal server. This is done through the nat server command.
Internal server configurations include: external IP address, external port, internal
server IP address, internal server port, and internal server protocol type.
If an internal server belongs to an MPLS VPN instance, you should specify the
vpn-instance-name argument. With this argument not provided, the internal
server is considered belonging to a private network.
Follow the following steps to configure an internal server:
To do...
Enter system view
Enter interface view
Configure an internal
server
c
CAUTION: Depending on device models, you may use an interface address of a
device as the public address of the internal server, namely, Easy IP. Note that this
interface must be an existing loopback interface configured with an IP address;
otherwise, the configurations to the internal server do not take effect.
NAT log is a type of system information generated by the NAT gateway during the
IP address translation. NAT log contains such information as the packet's source IP
address, source port address, destination IP address, destination port address,
translated source IP address, translated source port address and other user
operations. The log only traces operations of private network users in accessing an
external network, not those in the opposite direction.
As multiple private users share one public IP address when accessing an external
network through a NAT gateway, it is hard to identify each of the users. The log
Use the command...
nat outbound acl-number
address-group
group-number
Use the command...
system-view
interface interface-type interface-number
nat server [ vpn-instance vpn-instance-name ]
protocol pro-type global { global-address |
interface { interface-type interface-number } |
current-interface } [ global-port ] inside
host-address [ host-port ]
nat server [ vpn-instance vpn-instance-name ]
protocol pro-type global { global-address |
interface { interface-type interface-number } |
current-interface } global-port1 global-port2 inside
host-address1 host-address2 host-port
Remarks
Required
Remarks
-
-
Use either
command