H3C Technologies H3C SecPath F1000-E - Manual (Page 455)

14
Item Description
Global Port
Specify the global port number(s) for the internal server.
This option is available when 6(TCP) or 17(UDP) is selected as the protocol
type. You can:
• Use the single box to specify a global port.
• Use the double boxes to specify a range of global ports each of which has a
one-to-one correspondence with the specified internal IP address. The
number you typed in the right box should be higher than that in the left box.
If you use the single box and specify a port of 0, all types of services are
provided. This configuration indicates a static connection between external IP
addresses and internal IP addresses.
Internal VPN Instance
Specify a name of the MPLS VPN instance to which the internal server belongs.
If no internal VPN instance is specified, this indicates that the internal server is a
common private network server that does not belong to any MPLS VPN instance.
Internal IP
Specify the internal IP address(es) for the internal server.
• Single box: Used to specify an internal IP address when 6(TCP) or 17(UDP)
is not selected for the protocol type or you specify a single global port.
• Double boxes: Used to specify a range of internal IP addresses each of which
has a one-to-one correspondence with a port in the specified range. The IP
address in the right box must be higher than that in the left box, and the
number of addresses must be identical to the number of specified global
ports.
Internal Port
Specify the internal port number of the internal server.
This option is available when 6(TCP) or 17(UDP) is selected for the protocol
type. If you type 0 in the text box, all types of services are provided. This
configuration indicates a static connection between internal addresses and
external addresses.
Enable track to VRRP
VRRP Group
Configure whether to associate the internal server on an interface with a VRRP
group, and specify the VRRP group to be associated if you associate the internal
server on an interface with a VRRP group.
When two network devices deliver both stateful failover and dynamic NAT, to
ensure normal switchovers between the two devices, you need to add devices
to the same VRRP group, and associate dynamic NAT with the VRRP group.
Return to
Internal server configuration task list .
Configuring a DNS Mapping
Select Firewall > NAT Policy > Internal Server from the navigation tree to enter the page shown
in
Figure 10 . In the DNS-MAP field where all DNS mappings are displayed, click Add to enter the
Add DNS-MAP page shown in Figure 12 .