H3C Technologies H3C SecPath F1000-E - Manual (Page 22)

15
Figure 14 Adding the DNS-MAP
Table 10 Configuration items
Item Description
Protocol Select the protocol supported by an internal server.
Global IP Specify the external IP address of the internal server.
Global Port Specify the port number of the internal server.
Domain Specify the domain name of the internal server.
NAT configuration example
Network requirements
As shown in Figure 15 , a company has three public IP addresses ranging from 202.38.1.1/24 to
202.38.1.3/24, and a private network segment of 10.110.0.0/16. Specifically, the company requires
that the internal users in subnet 10.110.10.0/24 can access the Internet through NAT.
Figure 15 Network diagram
Configuration procedure
# Configure an ACL to permit internal users in subnet 10.110.10.0/24 to access the Internet.
• Select Firewall > ACL from the navigation tree, click Add, and then perform the following operations,
as shown in
Figure 16 .