beautypg.com

Using static nat, Dynamic configuration – Cabletron Systems SMARTSWITCH ROUTER 9032578-05 User Manual

Page 251

background image

SmartSwitch Router User Reference Manual

225

Chapter 16: Network Address Translation Configuration Guide

Using Static NAT

Static NAT can be used when the local and global IP addresses are to be bound in a fixed
manner. These bindings never get removed nor time out until the static NAT command
itself is negated. Static binding is recommended when you have a need for a permanent
type of binding.

The other use of static NAT is when the out to in traffic is the first to initialize a
connection, i.e., the first packet is coming from outside to inside. This could be the case
when you have a server in the local network and clients located remotely. Dynamic NAT
would not work for this case as bindings are always created when an in to out Internet
connection occurs. A typical example is a web server inside the local network, which
could be configured as follows:

This server, 10.1.1.2, is advertised as 192.50.20.2 to the external network.

Dynamic Configuration

The following example configures a dynamic address binding for inside addresses
10.1.1.0/24 to outside address 192.50.20.0/24:

The first step is to create the interfaces:

nat create static protocol tcp local-ip 10.1.1.2 global-ip 192.50.20.2
local-port 80 global-port 80

et.2.2

(192.50.20.1/24)

et.2.1

(10.1.1.1/24)

Global Internet

IP network 10.1.1.0/24

Router

interface 10-net

interface 192-net

10.1.1.4

10.1.1.2

10.1.1.3

Outbound: Translate source pool 10.1.1.0/24 to global pool 192.50.20.0/24

interface create ip 10-net address-netmask 10.1.1.1/24 port et.2.1
interface create ip 192-net address-netmask 192.50.20.1/24 port et.2.2