Table of Contents
Advertisement
Creating Static Outside Source Translations
ip nat outside source static
Defining Dynamic Translations
Copyright © 2010, Juniper Networks, Inc.
Less commonly used, outside source translation enables you to set up translation between
two non-unique or not publicly routable networks (for example, two separate networks
that use overlapping IP address blocks).
Use to translate the source address when routing a packet from the outside network
to the inside network, and to untranslate the destination address when a packet travels
from the inside network to the outside network.
Creates a simple (IP address only) or extended (IP address, protocol, and port) entry
in the translation table that maps the two addresses.
A static translation created with the ip nat outside source static command enables
any inside host to contact the outside host by using the outside local address of the
outside host. A static translation can be used by traffic that is initiated in either direction.
Example 1—Simple address translation
host (config) # ip nat outside source static 171.69.68.10 10.1.2.3
Example 2—Extended address/port translation
host (config) # ip nat outside source static tcp 171.69.68.10 56 10.1.2.3 24
Use the no version to remove the static translation and purge the associated translations
from the translation table.
See ip nat outside source static.
Dynamic translations use access list rules, to determine whether or not to apply NAT to
incoming traffic, and NAT address pools, from which a NAT translation can allocate IP
addresses. You use dynamic translation when you want the NAT router to initiate and
manage address translation and session flows between address realms on demand.
To configure dynamic translations:
Define any access list rules that the NAT router uses to decide which packets need
translation.
Define an address pool from which the NAT router obtains addresses.
Define inside and outside source translation rules for the NAT router to create NAT
translations.
Mark interfaces as inside or outside.
(Optional) Modify any translation timeout values.
Chapter 2: Configuring NAT
71
Advertisement
Table of Contents
