Domain Name-Related Nat Configuration Example - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com-acl-basic-2003] rule permit ip source 10.110.30.0 0.0.0.255 destination
10.110.0.0 0.0.255.255
[3Com-acl-adv-2003] rule deny ip source any destination any
[3Com-acl-adv-2003] quit
# Configure IPSec.
[3Com] ipsec proposal tran1
[3Com-ipsec-proposal-tran1] encapsulation-mode tunnel
[3Com-ipsec-proposal-tran1] transform esp
[3Com-ipsec-proposal-tran1] esp encryption-algorithm des
[3Com-ipsec-proposal-tran1] esp authentication-algorithm sha1
[3Com-ipsec-proposal-tran1] quit
[3Com] ipsec policy use1 10 manual
[3Com-ipsec-policyl-manual-use1-10] security acl 2003
[3Com-ipsec-policyl-manual-use1-10] proposal tran1
[3Com-ipsec-policyl-manual-use1-10] tunnel remote 202.38.160.1
[3Com-ipsec-policyl-manual-use1-10] tunnel local 202.38.162.1
[3Com-ipsec-policyl-manual-use1-10] sa spi outbound esp 54321
[3Com-ipsec-policyl-manual-use1-10] sa spi inbound esp 12345
[3Com-ipsec-policyl-manual-use1-10] sa string-key outbound esp gfedcba
[3Com-ipsec-policyl-manual-use1-10] sa string-key inbound esp abcdefg
[3Com-ipsec-policyl-manual-use1-10] quit
# Assign an IP address to interface serial 1/0/0 and apply the IPSec policy group on the
interface.
[3Com] interface serial 1/0/0
[3Com-Serial1/0/0] ip address 202.38.162.1 255.0.0.0
[3Com-Serial1/0/0] ipsec policy use1
[3Com-Serial1/0/0] quit
# Configure a static route to Router 1.
[3Com] ip route-static 10.110.0.0 255.255.0.0 202.38.160.1

11.5.6 Domain Name-Related NAT Configuration Example

I. Network requirements
Figure 11-9 presents a scenario where:
On intranet 10.0.0.0/8 deployed an FTP server and a WWW server.
The domain name is ftp.zc.com for the FTP server and www.zc.com for the WWW
server. The two names can be correctly resolved by external DNS servers.
The router uses interface Serial0/0/0 to provide access to the external network.
The IP address of the serial interface is 1.1.1.1/8.
3Com Corporation
11-23
Chapter 11 NAT Configuration