No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Examples

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 CLI-based Typical

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring NAT Static and Outbound NAT to Implement Communication Between Public Network Users and Servers

Example for Configuring NAT Static and Outbound NAT to Implement Communication Between Public Network Users and Servers

Applicability

This example applies to all versions and AR routers.

Networking Requirements

As shown in Figure 3-6, an FTP server is deployed on the Internet and the router functions as the enterprise egress gateway. To ensure security, the enterprise requires that service traffic between public network users and FTP server be forwarded through the router and IP addresses of the public network user and server are not detected.

Figure 3-6 Networking for configuring NAT static and outbound NAT to implement communication between public network users and servers

Procedure

  1. Configure the router.

    #
     sysname Router
    #                                                                               
    acl number 2000                                                                 
     rule 5 permit source any                                     
    #                                                                               
    interface GigabitEthernet1/0/0                                                  
     ip address 2.2.2.1 255.255.255.0                                            
     nat outbound 2000  //Configure outbound NAT and map the actual IP address of the user to the IP address of GE1/0/0.                    
    #                                                                               
    interface GigabitEthernet2/0/0                                                  
     ip address 1.1.1.1 255.255.255.0                                            
     nat static global current-interface inside 2.2.2.2  //Configure NAT static and map the actual IP address of the FTP server to the IP address of GE2/0/0.      
    #                                                                               
    return  

  2. Verify the configuration.

    # Run the display nat outbound command on the router.

    <Router> display nat outbound
     NAT Outbound Information:
     -----------------------------------------------------------------
     Interface                     Acl      Address-group/IP/Interface      Type
     GigabitEthernet1/0/0        2000                     2.2.2.1      easyip     
     --------------------------------------------------------------------------     
      Total : 1                                                                     

    # Run the display nat static command on the router.

    <Router> display nat static
      Static Nat Information:                                                       
      Interface  : GigabitEthernet0/0/0                                             
        Global IP/Port     : current-interface/---- (Real IP : 1.1.1.1)      
        Inside IP/Port     : 2.2.2.2/----                                        
        Protocol : ----                                                             
        VPN instance-name  : ----                                                   
        Acl number         : ----                                                   
        Vrrp id            : ----                                                   
        Netmask  : 255.255.255.255                                                  
        Description : ----                                                          
                                                                                    
      Total :    1                              

Download
Updated: 2019-08-12

Document ID: EDOC1100098908

Views: 25836

Downloads: 591

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next