Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual page 108

JunosE 11.2.x IP Services Configuration Guide
82
subscriber interface is created off the uplink to the core network and anchored in the
VRF. A DA-based demultiplexer matching the inside global address range is configured
on the subscriber interface. The subscriber interface is marked as an outside interface.
To configure this example:
Enter the correct virtual routing and forwarding instance.
1.
host1(config)#virtual-router vr1:vrf11
Mark the inside interfaces.
2.
host1:vr1:vrf11(config)#interface fast-ethernet 6/1
host1:vr1:vrf11 (config-interface)#ip nat inside
host1:vr1:vrf11 (config-interface)#exit
Set the primary interface to DA-type demultiplexer (for subsequent shared
3.
interfaces).
host1:vr1(config)#interface atm 12/0.101
host1:vr1(config-interface)#ip demux-type da-prefix
host1:vr1(config-interface)#exit
Create the address pool for dynamic translations.
4.
host1:vr1(config)#virtual-router vr1:vrf11
host1:vr1:vrf11(config)#ip nat pool entApool 128.13.44.0 128.13.44.255 prefix-length
24
Create the access list for addresses eligible for dynamic translation.
5.
host1:vr1:vrf11(config)#access-list entA permit 10.16.5.0 0.0.0.255
Create the dynamic translation rule.
6.
host1:vr1:vrf11(config)#ip nat inside source list entA pool entApool
Create the subscriber interface off the uplink.
7.
host1:vr1:vrf11(config)#interface ip vrf11vr1
host1:vr1:vrf11(config-interface)#ip share-interface atm 12/0.101
host1:vr1:vrf11(config-interface)#ip unnumbered loopback 1
Configure a group of destination prefixes with which the device can communicate
8.
on the public network.
host1:vr1:vrf11(config-interface)#ip destination-prefix 128.13.44.0 255.255.255.0
Mark the subscriber interface as outside.
9.
host1:vr1:vrf11(config-interface)#ip nat outside
host1:vr1:vrf11(config-interface)#exit
Point the default route to the shared interface.
10.
host1:vr1:vrf11(config)#ip route 0.0.0.0 0.0.0.0 ip vrf11vr1
Install a null route to avoid routing loops to the inside global address.
11.
host1:vr1:vrf11(config)#ip route 128.13.44.0 255.255.255.0 null 0
Copyright © 2010, Juniper Networks, Inc.