Cabletron Systems SSIM-R8-02 Specifikace stáhnout pdf (Strana 269)

Enterasys Xpedition User Reference Manual 249

Configuration Examples

Next, define the interfaces to be NAT “inside” or “outside”:

Then, define the NAT dynamic rules by first creating the source ACL pool and then

configuring the dynamic bindings:

Using Dynamic NAT with DNS

When a client from outside sends a query to the static global IP address of the DNS server,

NAT will translate the global IP address to the local IP address of the DNS server. The

DNS server will resolve the query and respond with a reply. The reply can include the

local IP address of a host inside the local network (for example, 10.1.1.2); this local IP

address will be translated by NAT into a global IP address (for example, 192.50.20.2) in a

dynamic binding for the response.

Dynamic NAT with Outside Interface Redundancy

The following example configures a dynamic address binding for inside addresses

10.1.1.0/24 to outside addresses 192.50.20.0/24 on interface 192-net and to outside

addresses 201.50.20.0/24 on interface 201-net:

nat set interface 10-net inside

nat set interface 192-net outside

acl lcl permit ip 10.1.1.0/24

nat create dynamic local-acl-pool lcl global-pool 192.50.20.2-192.50.20.9

nat create static local-ip 10.1.1.10 global-ip 192.50.20.10 protocol ip

et.2.2

(201.50.20.0/24)

et.2.1

(10.1.1.1/24)

IP network 10.1.1.0/24

Router

interface 10-net interface 201-net

10.1.1.4

10.1.1.2

10.1.1.3

Outbound: Translate source pool 10.1.1.0/24 to global pool 192.50.20.0/24

Global Internet

(192.50.20.0/24)

interface 192-net

et.2.3

Translate source pool 10.1.1.0/24 to global pool 201.50.20.0/24

1 2 ... 264 265 266 267 268 269 270 271 272 273 274 ... 393 394

Žádné komentáře

Cabletron Systems SSIM-R8-02 Specifikace Strana 269