Quick Start; Using The Cli To Configure Many-To-One Nat - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

Configuring Network Address Translation

Quick Start

N o t e
6-24
Quick Start
This "Quick Start" section provides the CLI commands you will need to
configure network address translation (NAT) on the ProCurve Secure Router.
Only a minimal explanation is provided.
If you need additional information about any of these options, check the
"Contents" on page 6-1 to locate the section and page number that contains
the explanation you need.
The fastest way to set up basic NAT services on the ProCurve Secure Router
is to use firewall wizard in the Web browser interface. For information about
using the firewall wizard, see Chapter 14: Using the Web Browser Interface
for Advanced Configuration Tasks.

Using the CLI to Configure Many-to-One NAT

Like most organizations, your company probably uses private IP addresses on
its internal network. In fact, your company may have only one public IP
address. When employees need to access the Internet, a NAT device must
change all the private IP addresses to that one public IP address—a process
called many-to-one NAT.
To implement many-to-one NAT on the ProCurve Secure Router, you must
configure an access control policy (ACP) and apply it to the appropriate
interface:
1. From the global configuration mode context, enable the firewall on the
ProCurve Secure Router.
ProCurve(config)# ip firewall
2. From the global configuration mode context, create a standard access
control list (ACL).
Syntax: ip access-list standard <listname>
Replace <listname> with the name you want to assign the ACL.
For example, to create an ACL called NAT, enter:
ProCurve(config)# ip access-list standard NAT