Mediant MSBRs 22 Document #: LTRT-31828
Security Setup
5.1 Configuration Examples
5.1.1 Configuring TCP and ICMP NAT
This example configures a NAT for TCP and ICMP traffic. UDP traffic will not use NAT.
# configure data
(config-data)# access-list gen_nat permit tcp 192.168.0.0
0.0.0.255 any
# gen_nat is a short for general NAT
(config-data)# access-list gen_nat permit icmp 192.168.0.0
0.0.0.255 any log
(config-data)# ip nat pool nat_pool 180.1.100.50 180.1.100.50
(config-data)# ip nat inside source list gen_nat interface
GigabitEthernet 0/0 pool nat_pool
This example configures a NAPT for TCP only:
# configure data
(config-data)# access-list gen_nat permit tcp 192.168.0.0
0.0.0.255 any
# gen_napt is a short for general NAPT
(config-data)# ip nat pool nat_pool 180.1.100.50 180.1.100.50
(config-data)# ip nat inside source list gen_nat interface
GigabitEthernet 0/0 pool nat_pool port 4000 5000
Below is the output of the show data ip nat translations command:
# show data ip nat translations
(Note: static translations are not shown)
NAT summary: 1 TCP, 0 UDP, 2 ICMP. Total 3 NAT connections.
.Pro Inside global Inside local Outside local
Outside global Timeout
ICMP180.1.100.50 512 192.168.0.3 512 180.1.100.100
180.1.100.100 0
ICMP180.1.100.50 512 192.168.0.3 512 180.1.100.101
180.1.100.101 0
TCP 180.1.100.50:2046 192.168.0.3:2046 180.1.100.100:80
180.1.100.100:80 7199
The output displays only TCP and ICMP sessions that have been translated. The output
does not display UDP sessions because the UDP traffic is not included in the gen_nat access
list.
5.1.2 Configuring Port Forwarding
This example configures port forwarding to forward port 2080 to port 80, from the WAN side
to the LAN side:
# configure data
(config-data)# ip nat inside source static tcp 192.168.0.200 80
GigabitEthernet 0/0 2080
The IP address of the interface gigabitEthernet 0/0 is 180.1.1.1. Every connection made to
IP address 180.1.1.1 on port 2080 is forwarded to IP address 192.168.0.200 on port 80.
To Next Page
Loading...
Need help?
General
