130
Step Command Remarks
NAT. global-ip [
vpn-instance
global-name ] [
acl
{ acl-number |
name
acl-name } [
reversible
] ]
processes only packets matching
the permit rule in the ACL.
3. Return to system view.
quit
N/A
4. Enter interface view.
interface
interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable
By default, static NAT is disabled.
Configuring outbound net-to-net static NAT
For address translation from a private network to a public network, configure outbound net-to-net
static NAT on the interface connected to the external network.
• When the source IP address of a packet from the private network matches the private address
range, the source IP address is translated into a public address in the public address range.
• When the destination IP address of a packet from the public network matches the public
address range, the destination IP address is translated into a private address in the private
address range.
To configure outbound net-to-net static NAT:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Configure a net-to-net
mapping for outbound static
NAT.
nat static outbound net-to-net
local-start-address
local-end-address [
vpn-instance
local -name
]
global
global-network { mask-length |
mask } [
vpn-instance
global-name
] [
acl
{ acl-number |
name
acl-name } [
reversible
] ]
By default, no mappings exist.
If you specify an ACL, NAT
processes only packets matching
the permit rule in the ACL.
3. Return to system view.
quit
N/A
4. Enter interface view.
interface
interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable
By default, static NAT is disabled.
Configuring inbound one-to-one static NAT
For address translation from a public IP address to a private IP address, configure inbound
one-to-one static NAT.
• When the source IP address of a packet from the public network to the private network matches
the global-ip, the source IP address is translated into the local-ip.
• When the destination IP address of a packet from the private network to the public network
matches the local-ip, the destination IP address is translated into the global-ip.
To configure inbound one-to-one static NAT: