Defining Dynamic Translation Rules - Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual

JUNOSe 11.1.x IP Services Configuration Guide
ip nat pool

Defining Dynamic Translation Rules

You can use the CLI to define dynamic translation rules for inside and outside sources.
CAUTION: You must mark interfaces that participate in NAT translation as on the
inside or the outside network. See "Specifying Inside and Outside Interfaces" on
page 71 for details.
You can create a dynamic translation rule to configure inside source or outside source
translation. If the NAT router cannot locate a matching entry in its translation database
for a given packet, it evaluates the access list of all applicable dynamic translation
rules (inside source translation rules for outbound packets and outside source
translation rules for inbound packets) against the packet. If an access list permits
translation, the NAT router tries to allocate an address from the associated address
pool to install a new translation.
When you create dynamic translation rules, keep the following in mind:
76
Defining Dynamic Translations
Use the no version to remove the range for the current address pool.
See address.
Use to create address pools.
Example 1 Creating a single, continuous range
host (config) #ip nat pool singlerange 171.69.40.1 171.69.40.100
prefix-length 30
Example 2 Creating multiple, discontinuous ranges
host (config) #ip nat pool multiplerange prefix-length 30
host (config-ipnat-pool)#address 171.69.40.110 171.69.40.112
host (config-ipnat-pool)#address 171.69.40.118 171.69.40.120
host (config-ipnat-pool)#exit
Use the no version to remove the address range.
See ip nat pool.
You can associate a list with one pool at any given time. Associating a list with
a different pool replaces the previous association.
The optional overload keyword for inside source translation specifies that the
router employ NAPT.
You can configure dynamic NAPT for inside source translation only; you cannot
configure dynamic NAPT for outside source translation.
When no match occurs for any dynamic translation rule, the NAT router does
not translate the packet.