Nortel Networks WEB OS 212777 - Manual (Page 192)

Web OS 10.0 Application Guide
192 n Chapter 7: Filtering
212777-A, February 2002
In this example, clients on the Internet require access to servers on the private network:
Figure 7-8 Static Network Address Translation
Configuring Static NAT
>> # /cfg/slb/filt 10 (Select the menu for outbound filter)
>> Filter 10# action nat (Perform NAT on matching traffic)
>> Filter 10# nat source (Translate source information)
>> Filter 10# sip 10.10.10.0 (From the clients private IP address)
>> Filter 10# smask 255.255.255.0 (For the entire private subnet range)
>> Filter 10# dip 205.178.13.0 (To the public network address)
>> Filter 10# dmask 255.255.255.0 (For the same subnet range)
>> Filter 10# ena (Enable the filter)
>> Filter 10# adv/proxy disable (Override any proxy IP settings)
>> Filter 10 Advanced# /cfg/slb/filt 11 (Select the menu for inbound filter)
>> Filter 11# action nat (Use the same settings as outbound)
>> Filter 11# nat dest (Reverse the translation direction)
>> Filter 11# sip 10.10.10.0 (Use the same settings as outbound)
>> Filter 11# smask 255.255.255.0 (Use the same settings as outbound)
>> Filter 11# dip 205.178.13.0 (Use the same settings as outbound)
>> Filter 11# dmask 255.255.255.0 (Use the same settings as outbound)
>> Filter 11# ena (Enable the filter)
>> Filter 11# adv/proxy disable (Override any proxy IP settings)
>> Filter 11 Advanced# /cfg/slb/port 1 (Select server-side port)
>> SLB port 1# add 10 (Add the outbound filter)
>> SLB port 1# filt enable (Enable filtering on port 1)
>> SLB port 1# ../port 2 (Select the client-side port)
>> SLB port 2# add 11 (Add the inbound filter)
>> SLB port 2# filt enable (Enable filtering on port 2)
>> SLB port 2# apply (Apply configuration changes)
>> SLB port 2# save (Save configuration changes)
Router
External Clients
Internet
Inbound filter:
NAT destination
to private address
Outbound filter:
NAT source info
to public address
1 2
Public IP Address:
205.178.13.x
Server:
10.10.10.1
(Private network)