131
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Configure a one-to-one
mapping for inbound static
NAT.
nat static inbound
global-ip
[
vpn-instance
global-name ]
local-ip [
vpn-instance
local-name ] [
acl
{ acl-number |
name
acl-name } [
reversible
] ]
By default, no mappings exist.
If you specify an ACL, NAT
processes only packets matching
the permit rule in the ACL.
3. Return to system view.
quit
N/A
4. Enter interface view.
interface
interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable
By default, static NAT is disabled.
Configuring inbound net-to-net static NAT
For address translation from a public network to a private network, configure inbound net-to-net
static NAT.
• When the source IP address of a packet from the public network matches the public address
range, the source IP address is translated into a private address in the private address range.
• When the destination IP address of a packet from the private network matches the private
address range, the destination IP address is translated into a public address in the public
address range.
To configure inbound net-to-net static NAT:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Configure a net-to-net
mapping for inbound static
NAT.
nat static inbound net-to-net
global-start-address
global-end-address
[
vpn-instance
global -name
]
local
local-network { mask-length
| mask } [
vpn-instance
local-name
] [
acl
{ acl-number |
name
acl-name } [
reversible
] ]
By default, no mappings exist.
If you specify an ACL, NAT
processes only packets matching
the permit rule in the ACL.
3. Return to system view.
quit
N/A
4. Enter interface view.
interface
interface-type
interface-number
N/A
5. Enable static NAT on the
interface.
nat static enable
By default, static NAT is disabled.
Configuring dynamic NAT
Dynamic NAT translates a group of private IP addresses into a smaller number of public addresses.
You can specify an address group (or the IP address of an interface) and an ACL to implement
dynamic NAT.