H3C Technologies H3C S12500 Series Switches - Manual (Page 127)

113
# Configure the internal FTP server.
[Device-Vlan-interface20] nat server protocol tcp global 202.38.1.2 inside 10.110.10.2
ftp
[Device-Vlan-interface20] quit
# Configure two DNS mapping entries: map the domain name www.server.com of the web server to
202.38.1.2, and ftp.server.com of the FTP server to 202.38.1.2.
[Device] nat dns-map domain www.server.com protocol tcp ip 202.38.1.2 port www
[Device] nat dns-map domain ftp.server.com protocol tcp ip 202.38.1.2 port ftp
[Device] quit
Verifying the configuration
# Display the DNS mapping configuration information.
<Device> display nat dns-map
NAT DNS mapping information:
There are currently 2 NAT DNS mapping(s)
Domain-name: www.server.com
Global-IP : 202.38.1.2
Global-port: 80(www)
Protocol : 6(TCP)
Domain-name: ftp.server.com
Global-IP : 202.38.1.2
Global-port: 21(ftp)
Protocol : 6(TCP)
Host A and Host B can use the domain name www.server.com to access the web server, and use
ftp.server.com to access the FTP server.
Exporting NAT logs to the information center
Network requirements
• A host in the private network accesses Device B in the public network through Device A, which is
enabled with NAT.
• Device A sends NAT logs to the information center in the form of system logs.
• You can view the records on the information center to supervise the private network users.
Figure 53 Network diagram
Configuration procedure
The following only lists configurations pertinent to NAT logs.