H3c-technologies H3C SecPath F1000-E Bedienungsanleitung PDF herunterladen (Seite 31)

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Configure an

address pool.

nat address-group group-number

start-address end-address

Not necessary when the router provides only

Easy IP, where an interface's public IP address

is used as the translated IP address.

To configure an address group:

Ste

Command

1. Enter system view.

system-view

2. Create an address group and enter its view.

nat address-group group-number

3. Add a member to the address group.

address start-address end-address

NOTE:

• Address pools must not overlap.

• The IP address pools of address

roup members must not overlap with each other or with other address

pools.

Configuring Easy IP

Easy IP allows the firewall to use the IP address of one of its interfaces as the source address of NATed

packets.

To configure Easy IP:

Ste

Command

1. Enter system view.

system-view

2. Enter interface view.

interface interface-type interface-number

3. Enable Easy IP by associating an ACL with

the IP address of the interface.

nat outbound [ acl-number ] [ track vrrp virtual-router-id ]

Configuring No-PAT

With a specific ACL associated with an address pool or interface address, No-PAT translates the source

address of a packet permitted by the ACL into an IP address of the address pool or the interface address,

without using the port information.

To configure No-PAT:

Ste

Command

1. Enter system view.

system-view

2. Enter interface view.

interface interface-type interface-number

3. Configure No-PAT by associating an ACL with an IP

address pool on the outbound interface for

translating only IP addresses.

nat outbound [ acl-number ] address-group

group-number [ vpn-instance vpn-instance-name ]

no-pat [ track vrrp virtual-router-id ]

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 67 68

Kommentare zu diesen Handbüchern

Keine Kommentare

H3c-technologies H3C SecPath F1000-E Bedienungsanleitung Seite 31

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Sicherheit H3c-technologies H3C SecPath F1000-E