Configuring Nat - Zte ZXR10 8900 Series User Manual

ZXR10 8900 Series User Manual (FW Volume)
90 Confidential and Proprietary Information of ZTE CORPORATION
tion address range of packet of applicable to address translation
rule, then define corresponding services, and the last one is trans-
lation control mode. FW card provides the following translation
control modes:
� SNAT: Users with private addresses can access public network.
�
DNAT: Users in public network can access intranet server with
private address.
� NoNAT: It can be used to define special cases of SNAT, DNAT,
bi-directional NAT rules. In this case, it shall be placed in the
front of NAT rule list.
All address translation rules defined by FW card are stored in rule
table in certain sequence. When one packet passes through FW
card, FW card will retrieve address translation rule table according
to sequence of address translation rules and match them with the
packet one by one. Once the packet is found to match one address
translation rule, FW card will stop retrieving and process the packet
according to defined rule.

Configuring NAT

This topic describes configuration commands and configuration ex-
amples of NAT.
Commands in this module are used for address translation policy-
related configurations.
To access this command module, execute the following command:
ZXR10_FW # nat
To exit from this command module, execute the following com-
mand:
ZXR10_FW # end
1. Adding NAT policy.
Command
ZXR10_FW.nat#policy add [srcarea
<srcarea_nam>][dstarea <dstarea_n
am>][srcvlan <srcvlan_no>][dstvlan
<dstvlan_no>][orig_src <src_addr1
>][orig_dst <dst_addr1>][orig_sport
<sport_id>][orig_service <ser_id>][tr
ans_src < src_addr2>][trans_dst
<dst_addr2>][trans_service
<ser_obj>][pat <yes|no>][enable
<yes|no>][before <number2>]
Parameter Description:
Parameter
add
srcarea
Function
This adds NAT policy.
Description
This adds NAT policy.
This sets source area.