H3C Technologies H3C SecPath F1000-E - Manual (Page 34)

27
One-to-one static NAT configuration example
Network requirements
As shown in Figure 25 , an internal host 10.110.10.8/24 uses public address 202.38.1.100 to access the
Internet.
Figure 25 Network diagram
Configuration procedure
# Configure the IP addresses for the interfaces. (Details not shown.)
# Configure a one-to-one static NAT mapping
system-view
[SecPath] nat static 10.110.10.8 202.38.1.100
# Enable static NAT on interface GigabitEthernet 0/2.
[SecPath] interface gigabitethernet 0/2
[SecPath-GigabitEthernet0/2] nat outbound static
[SecPath-GigabitEthernet0/2] quit
Dynamic NAT configuration example
Network requirements
As shown in Figure 26 , a company has three public IP addresses ranging from 202.38.1.1/24 to
202.38.1.3/24, and a private network segment of 10.110.0.0/16. Specifically, the company requires
that the internal users in subnet 10.110.10.0/24 can access the Internet through NAT.
Figure 26 Network diagram
Configuration procedure
# As shown in Figure 26 , configure the IP addresses for the interfaces. (Details not shown.)
# Configure address pool 1.
system-view
Host
10.110.10.8/24
Server
Internet
GE0/1
10.110.10.1/24
GE0/2
202.38.1.1/16
SecPath