Nat Configuration Example; Address-Based Source Address Translation; Configuration Example; Figure 4 Address-Based Source Address Translation - Zte ZXR10 8900 Series User Manual

ZXR10 8900 Series User Manual (FW Volume)
96 Confidential and Proprietary Information of ZTE CORPORATION

NAT Configuration Example

Address-Based Source Address
Translation Configuration Example
Source address translation policy of FW card supports address re-
source-based source address translation. Address resources that
can be translated include single host, host address range and sub-
net. Source address can be translated in the following modes:
fixedly mapping source address to a legal IP address and dynami-
cally mapping source address to a network segment or the address
within an address range. Gei_3/1 in interface vlan1 on FW card is
connected to intranet, intranet address is 192.168.100.0/24 and ip
address of interface vlan1 is 192.168.100.1; Gei_3/2 in interface
vlan2 is connected to extranet and ip address of interface vlan2
is 202.10.10.1. The available range of public network IP address
for enterprise is 202.10.10.1-202.10.10.10. Network topology di-
agram is shown in Figure
F 4 A -B
IGURE DDRESS ASED
E
XAMPLE
1. To define area resource, execute the following command:
ZXR10_FW #define area add name area_vlan2 access on
attribute gei_3/2 ZXR10_FW #define area add name area_vlan1
access off attribute gei_3/1
2. To define intranet address resource, execute the following com-
mand:
ZXR10_FW #define subnet add name subnet1 ipaddr
192.168.100.0 mask 255.255.255.0
3. To define NAT address pool resource, execute the following
command:
ZXR10_FW #define range add name nat-pool ip1
202.10.10.1 ip2 202.10.10.10
4. To define NAT rule and dynamically select one IP address after
being translated in address pool, execute the following com-
mand:
ZXR10_FW #nat policy add srcarea area_vlan1
4.
S A T
OURCE DDRESS RANSLATION
C
ONFIGURATION