Configuring Inbound Dynamic Nat - HP FlexNetwork MSR2003 Configuration Manual

Step
7. Return to system
view.
8. (Optional.) Configure
a PAT mapping mode.

Configuring inbound dynamic NAT

Inbound dynamic NAT enables translation from public IP addresses to private IP addresses. Do not
configure it alone. Typically, inbound dynamic NAT functions with outbound dynamic NAT, NAT
Server, or outbound static NAT to implement bidirectional NAT.
The source IP address of a received packet that is permitted by the ACL is translated into a public
address in the address group.
The add-route keyword enables the device to automatically add a route destined for the private
address when an inbound dynamic NAT rule is matched. The output interface is the NAT interface,
and the next hop is the source address before translation. If you do not specify this keyword, you
must manually add the route. As a best practice, create a route manually because it takes time to
automatically add routes.
The reversible keyword enables the device to perform the following operations:
•
Compare the destination IP address in the first packet from the private network with existing
NO-PAT entries.
•
Translate the destination address into the public address in a matching NO-PAT entry.
Inbound dynamic NAT does not support Easy IP.
To configure inbound dynamic NAT:
Step
1. Enter system view.
2. Configure an address
group and enter its
view.
3. Add an address range
to the address group.
4. Return to system view.
5. Enter interface view.
Command
name acl-name ] address-group
group-number [ vpn-instance
vpn-instance-name ] no-pat
[ reversible ]
•
Configure PAT:
nat outbound [ acl-number |
name acl-name ]
[ address-group group-number ]
[ vpn-instance
vpn-instance-name ]
[ port-preserved ]
quit
nat mapping-behavior
endpoint-independent [ acl
{ acl-number | name acl-name } ]
Command
system-view
nat address-group group-number
address start-address end-address
quit
interface interface-type
133
Remarks
You can configure multiple
outbound dynamic NAT rules on an
interface.
N/A
The default mapping mode is
Address and Port-Dependent
Mapping.
This command takes effect only on
outbound dynamic NAT for PAT.
Remarks
N/A
By default, no address group exists.
By default, no address range exists.
You can add multiple address
ranges to an address group. The
address ranges must not overlap.
N/A
N/A