Cisco 4700M Configuration Manual page 336

Configuring Dynamic NAT and PAT
Table 5-1
Task and Command Example
1.
2.
3.
4.
5.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
5-10
Dynamic NAT and PAT Configuration Quick Start
If you are operating in multiple contexts, observe the CLI prompt to verify
that you are operating in the desired context. If necessary, change to the
correct context.
host1/Admin# changeto C1
host1/C1#
The rest of the examples in this table use the C1 user context, unless
otherwise specified. For details on creating contexts, see the Cisco 4700
Series Application Control Engine Appliance Virtualization Configuration
Guide.
Enter configuration mode.
host1/C1# config
host1/C1(config)#
Configure an ACL to allow traffic that requires NAT.
host1/C1(config)# access-list NAT_ACCESS extended permit tcp
192.168.12.0 255.255.255.0 172.27.16.0 255.255.255.0 eq 80
host1/C1(config-acl)# exit
Configure a local interface (client interface) to receive traffic that requires
NAT. If you are operating the ACE in one-arm mode, omit this step.
host1/C1(config)# interface vlan 100
host1/C1(config-if)# mtu 1500
host1/C1(config-if)# ip address 192.168.12.100 255.255.255.0
host1/C1(config-if)# no shutdown
host1/C1(config-if)# exit
Configure a second interface (server interface) for the global IP address
pool.
host1/C1(config)# interface vlan 200
host1/C1(config-if)# mtu 1500
host1/C1(config-if)# ip address 172.27.16.2 255.255.255.0
host1/C1(config-if)# no shutdown
host1/C1(config-if)# exit
Chapter 5 Configuring Network Address Translation
OL-16202-01