Configuring Many-To-One Nat For Outbound Traffic; Configuring One-To-One Nat For Inbound Traffic - HP 7102dl - ProCurve Secure Router Configuration Manual

Configuring Network Address Translation
Configuring NAT
6-14
For example, to create an ACP called NATInside, enter:
ProCurve(config)# ip policy-class NATInside
The router prompt shows that you are at the policy class configuration mode
context:
ProCurve(config-policy-class)#

Configuring Many-to-One NAT for Outbound Traffic

When you configure many-to-one NAT, you base NAT on the source IP address.
From the policy-class configuration mode context, enter:
Syntax: nat source list <listname> [address <A.B.C.D> | interface <interface>]
overload
Replace <listname> with the name of the ACL that selects the traffic that you
want to NAT. For example, you may have created an ACL called MatchAll.
You have two options for specifying the public IP address. You can use the
address <A.B.C.D> option to specify a particular IP address, or you can use
the interface <interface> option to specify a particular interface. If you use
the interface option, the Secure Router OS will NAT the traffic selected by
the ACL to the IP address assigned to that interface.
You must include the overload keyword to enable many devices to share one
IP address.
For example, to configure the Secure Router OS firewall to NAT all traffic
selected by the MatchAll ACL to the IP address 10.10.1.1, enter:
ProCurve(config-policy-class)# nat source list MatchAll address 10.10.1.1 overload
After you configure the ACP, you must assign it to an interface, or it will have
no affect on the traffic entering the router. This step is described in "Assigning
the ACP to an Interface" on page 6-16.

Configuring One-to-One NAT for Inbound Traffic

To configure one-to-one NAT for inbound traffic, you base NAT on the desti-
nation IP address. From the policy-class configuration mode context, enter:
Syntax: nat destination list <listname> address <A.B.C.D>