Defining Dynamic Translation Rules - Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual

For e series broadband services routers - ip services configuration
Table of Contents

Advertisement

address
ip nat pool

Defining Dynamic Translation Rules

Copyright © 2010, Juniper Networks, Inc.
are not allocated from an address pool, even if they are included in an address pool
range.
You cannot remove an address pool if the pool is part of a translation rule or if any of
the ranges within the pool are still in use. You must issue the clear ip nat translation
command to clear any ranges before you can remove the pool to which they apply.
Use to specify a range of IP addresses in config-ipnat-pool mode; you can repeat the
address command to create multiple ranges.
Example
host (config-ipnat-pool)#address 171.69.40.110 171.69.40.115
Use the no version to remove the range for the current address pool.
See address.
Use to create address pools.
Example 1—Creating a single, continuous range
host (config) #ip nat pool singlerange 171.69.40.1 171.69.40.100prefix-length 30
Example 2—Creating multiple, discontinuous ranges
host (config) #ip nat pool multiplerange prefix-length 30
host (config-ipnat-pool)#address 171.69.40.110 171.69.40.112
host (config-ipnat-pool)#address 171.69.40.118 171.69.40.120
host (config-ipnat-pool)#exit
Use the no version to remove the address range.
See ip nat pool.
You can use the CLI to define dynamic translation rules for inside and outside sources.
CAUTION: You must mark interfaces that participate in NAT translation as on the inside
or the outside network. See "Specifying Inside and Outside Interfaces" on page 69 for
details.
You can create a dynamic translation rule to configure inside source or outside source
translation. If the NAT router cannot locate a matching entry in its translation database
for a given packet, it evaluates the access list of all applicable dynamic translation rules
(inside source translation rules for outbound packets and outside source translation rules
for inbound packets) against the packet. If an access list permits translation, the NAT
router tries to allocate an address from the associated address pool to install a new
translation.
When you create dynamic translation rules, keep the following in mind:
Chapter 2: Configuring NAT
73

Advertisement

Table of Contents
loading

This manual is also suitable for:

Junose 11.2.x

Table of Contents