Nbt alg configuration example – H3C Technologies H3C SecBlade FW Cards User Manual

Page 43

Advertising
background image

36

Figure 25 Network diagram for SIP ALG configuration

2.

Configuration procedure

# Configure the address pool and ACL.

<Router> system-view

[Router] nat address-group 1 5.5.5.9 5.5.5.11

[Router] acl number 2001

[Router-acl-basic-2001] rule permit source 192.168.1.0 0.0.0.255

[Router-acl-basic-2001] rule deny

[Router-acl-basic-2001] quit

# Enable ALG for SIP.

[Router] alg sip

# Configure NAT.

[Router] interface ethernet 1/2

[Router-Ethernet1/2] nat outbound 2001 address-group 1

NBT ALG configuration example

1.

Network requirements

As shown in

Figure 23

, a company accesses the Internet through a device with NAT and ALG enabled.

The company provides NBT services to the outside. The inside network segment of the company is
192.168.1.0/24. Configure NAT and ALG to meet the following requirements:

Host B can access the WINS server and Host A with host names.

Host A uses 5.5.5.9 as its external IP address, and the WINS server uses 5.5.5.10 as its external IP
address.

Figure 26 Network diagram for NBT ALG configuration

2.

Configuration procedure

# Configure a static NAT entry.

<Router> system-view

[Router] nat static 192.168.1.3 5.5.5.9

Advertising