H3C Technologies H3C SecPath F1000-E - Manual (Page 21)

14
Configuring ACL-based NAT on the internal server
Select Firewall > NAT Policy > Internal Server from the navigation tree to enter the page shown in Figure
11 . In the Internal Server Based on ACL area, click Add to enter the ADD Internal Server Based on ACL
page shown in Figure 13 .
Figure 13 Adding an internal server based on ACL
Table 9 Configuration items
Item Description
Interface Specify an interface to which the internal server policy is applied.
Protocol type Select the protocol number.
ACL Enter the number of an ACL referenced by the internal server policy.
Internal VPN
Instance
Select the Internal VPN Instance option, and select the VPN instance to which the
internal server belongs.
If the internal server does not belong to any VPN instance, do not select the option.
Internal IP Enter the internal IP address of the internal server.
Internal Port
Enter the port number of the internal server.
This option is available when 6(TCP) or 17(UDP) is selected for the protocol type. If you
enter 0 in the field, all types of services are provided. The value 0 indicates that a static
connection exists between the internal address and external address.
Configuring a DNS mapping
Select Firewall > NAT Policy > Internal Server from the navigation tree to enter the page shown in Figure
11 . In the DNS-MAP field where all DNS mappings are displayed, click Add to enter the Add DNS-MAP
page shown in Figure 14 .