H3C Technologies H3C SecBlade FW Cards - Manual (Page 16)

9
Item Description
Address Transfer
Select an address translation mode:
• PAT: Refers to NAPT. In this mode, associating an ACL with an address pool
translates both IP addresses and port numbers.
• No-PAT: Refers to many-to-many NAT. In this mode, associating an ACL with an
address pool translates only IP addresses.
• Easy IP: In this mode, the NAT gateway directly uses an interface’s public IP
address as the translated IP address, and uses an ACL to match IP packets.
Only one mode can be selected for an address pool.
Address Pool Index
Specify the index of a NAT address pool for dynamic NAT.
The NAT address pool must have been configured through NAT address
configuration.
If Easy IP is selected for Address Transfer, you do not need to type an address pool
index.
Enable track to VRRP
Configure whether to associate dynamic NAT on an interface with a VRRP group,
and specify the VRRP group to be associated if you associate dynamic NAT on an
interface with a VRRP group.
When two network devices implement both stateful failover and dynamic NAT,
• Make sure that each address pool on an interface is associated with one VRRP
group only; otherwise, the system associates the address pool with the VRRP group
having the highest group ID.
• To ensure normal switchovers between the two devices, you need to add the
devices to the same VRRP group, and associate dynamic NAT with the VRRP
group.
VRRP Group
Return to Dynamic NAT configuration task list .
Creating a static address mapping
Select Firewall > NAT Policy > Static NAT from the navigation tree to enter the page, as shown in Figure
7 . In the Static Address Mapping field where static address mappings are displayed, click Add to enter
the Add Static Address Mapping page shown in Figure 8 .