Ruijie RG-WLAN Series User Manual

Configuration Guide Configuring NAT
A(config)# interface GigabitEthernet 0/1
A(config-if-GigabitEthernet 0/1)# ip address 200.198.12.1 255.255.255.0
A(config-if-GigabitEthernet 0/1)# ip nat outside
A(config-if-GigabitEthernet 0/1)# exit
A(config)# ip nat pool realhosts 10.10.10.2 10.10.10.3 netmask 255.255.255.0 type rotary
A(config)# ip nat inside destination list 100 pool realhosts
A(config)# access-list 100 permit ip any host 10.10.10.100
Verification
Use the show command to display the configuration.
A
Ruijie# show ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 10.10.10.100:23 10.10.10.2:23 100.100.100.100:1178 100.100.100.100:1178
tcp 10.10.10.100:23 10.10.10.3:23 200.200.200.200:1024 200.200.200.200:1024
Common Errors
 The inside or outside interface is not configured.
 The ACL configuration is incorrect. Note that the ACL must be configured as an extended ACL based on destination
IP address matching.
 The above configuration takes effect on TCP traffic only but not on other traffic, unless additional NAT configuration
has been performed.
10.4.5 Configuring ALG
Networking
Requirements
In general, NAT translates only IP address and port information in the header of a packet but does not analyze fields in the
application layer data payload of the packet. However, for some special protocols, such as FTP, DNS, and FTFP, the data
payloads of their packets may contain IP address or port information. If such information is not translated by NAT, certain
problems may occur. The NAT ALG technology can parse application layer packet information and perform address
translation for multi-channel protocols, so as to translate or process the IP addresses or ports requiring address
translation or some fields requiring special processing, thereby guaranteeing the correctness of application layer
communications.
Notes
 At least one inside interface and one outside interface need to be configured during the configuration of ALG.
 The newly configured NAT rules take effect on new flows only but not on any existing flows.
Configuration Steps
 Configuring the NAT Inside Interface
 Mandatory configuration.
 Unless otherwise noted, the interface connecting intranet should be configured as the NAT inside interface.

Ruijie RG-WLAN Series Specifications

General

Brand	Ruijie
Model	RG-WLAN Series
Category	Wireless Access Point
Language	English