Figure 7: Bidirectional Nat Example - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual

Copyright © 2010, Juniper Networks, Inc.

Figure 7: Bidirectional NAT Example

To configure this example:
Enter the correct virtual router context.
1.
host1(config)#virtual-router blue
Mark the inside interface.
2.
host1:blue(config)#interface serial 1/1:1/1
host1:blue(config-interface)#ip nat inside
host1:blue(config-interface)#exit
Mark the outside interface.
3.
host1:blue(config)#interface gigabitEthernet 3/0.1
host1:blue(config-interface)#ip nat outside
host1:blue(config-interface)#exit
Create the translation for the DNS.
4.
host1:blue(config)#ip nat inside source static 192.168.22.2 192.32.6.1
Create the address pool for dynamic translations.
5.
host1:blue(config)#ip nat pool entA192 192.32.6.2 192.32.6.63 prefix-length 24
Create the access list for addresses eligible for dynamic translation (that is, private
6.
addresses).
host1:blue(config)#access-list entA permit 192.168.22.0 0.0.0.255
Create the dynamic translation rule.
7.
host1:blue(config)#ip nat inside source list entA pool entA192
Configure a default route to the outside interface.
8.
host1:blue(config)#ip route 0.0.0.0 0.0.0.0 gigabitEthernet 3/0.1
Configure a null route for the inside global addresses, to prevent routing loops when
9.
no matching translation exists.
host1:blue(config)#ip route 192.32.6.0 255.255.255.192 null 0
NOTE: Null route applies to 192.32.6.0 and 192.32.6.1, which do not exist
in the address pool.
Chapter 2: Configuring NAT
79