beautypg.com

Verifying the configuration, Exporting nat logs to the information center, Network requirements – H3C Technologies H3C S12500 Series Switches User Manual

Page 127: Configuration procedure

background image

113

# Configure the internal FTP server.

[Device-Vlan-interface20] nat server protocol tcp global 202.38.1.2 inside 10.110.10.2

ftp

[Device-Vlan-interface20] quit

# Configure two DNS mapping entries: map the domain name www.server.com of the web server to
202.38.1.2, and ftp.server.com of the FTP server to 202.38.1.2.

[Device] nat dns-map domain www.server.com protocol tcp ip 202.38.1.2 port www

[Device] nat dns-map domain ftp.server.com protocol tcp ip 202.38.1.2 port ftp

[Device] quit

Verifying the configuration

# Display the DNS mapping configuration information.

display nat dns-map

NAT DNS mapping information:

There are currently 2 NAT DNS mapping(s)

Domain-name: www.server.com

Global-IP : 202.38.1.2

Global-port: 80(www)

Protocol : 6(TCP)

Domain-name: ftp.server.com

Global-IP : 202.38.1.2

Global-port: 21(ftp)

Protocol : 6(TCP)

Host A and Host B can use the domain name www.server.com to access the web server, and use
ftp.server.com to access the FTP server.

Exporting NAT logs to the information center

Network requirements

A host in the private network accesses Device B in the public network through Device A, which is

enabled with NAT.

Device A sends NAT logs to the information center in the form of system logs.

You can view the records on the information center to supervise the private network users.

Figure 53 Network diagram

Configuration procedure

The following only lists configurations pertinent to NAT logs.