H3C Technologies H3C SecBlade FW Cards - Manual (Page 29)

22
To do… Use the command… Remarks
Display the internal server
information
display nat server Available in any view
Display static NAT information display nat static Available in any view
Display NAT statistics display nat statistics Available in any view
NAT configuration examples
One-to-one static NAT configuration example
1. Network requirements
An internal host 10.110.10.8/24 uses public address 202.38.1.100 to access the Internet.
Figure 15 Network diagram for one-to-one static NAT configuration
2. Configuration procedure
# As shown in Figure 15 , configure the IP addresses for the interfaces (omitted).
Method I
# Configure a one-to-one static NAT mapping.
<Secpath> system-view
[Secpath] nat static 10.110.10.8 202.38.1.100
# Enable static NAT on interface GigabitEthernet 0/2.
[Secpath] interface gigabitethernet 0/2
[Secpath-GigabitEthernet0/2] nat outbound static
[Secpath-GigabitEthernet0/2] quit
Dynamic NAT configuration example
1. Network requirements
As shown in Figure 16 , a company has three public IP addresses ranging from 202.38.1.1/24 to
202.38.1.3/24, and a private network segment of 10.110.0.0/16. Specifically, the company requires
that the internal users in subnet 10.110.10.0/24 can access the Internet through NAT.
Host
10.110.10.8/24
Server
Internet
GE0/1
10.110.10.1/24
GE0/2
202.38.1.1/16
SecPath