H3C Technologies H3C SecPath F1000-E - Manual (Page 38)

31
5. Be aware of the possible effects that the firewall or the ACLs have on NAT, and note the route
configurations.
Symptom 2
The internal server functions abnormally.
Solution
1. Verify the internal server host is properly configured.
2. Verify the router is correctly configured with respect to the internal server parameters, such as the
internal server IP address.
3. Use the display acl command to verify that the firewall permits external access to the internal
network. For more information about firewall, see Attack Protection Configuration Guide.
Configuration guidelines
1. When you configure address pools, note the following:
{
An address pool cannot include addresses in other address pools or IP addresses of interfaces
with Easy IP enabled.
{
Low-priority address pools cannot include addresses in non low-priority address pools or IP
address of interfaces with Easy IP enabled.
2. If 6(TCP) or 17(UDP) is not selected as the protocol type when you configure an internal server, you
can only configure the mapping between Internal IP and Global IP. In this case, the Internal Port
and Global Port options are not available.
3. The address pool, dynamic NAT, static NAT, and internal server configurations can be modified
through Web pages. Note that the modification you make takes effect after the former
configuration is removed by the system.