Brocade Communications Systems ServerIron ADX 12.4.00a - Manual (Page 114)

100 ServerIron ADX Security Guide
53-1002440-03
Configuring NAT
4
Dynamic NAT configuration example 1
This section describes the Dynamic NAT configuration shown in Figure 6 .
FIGURE 6 Minimum required commands
Figure 6 shows an example of a network using dynamic NAT on a ServerIron ADX ADX. The device is
acting as a gateway to connect a private network to the Internet. The private network, which can
also be considered as the inside network, is using IP addresses in the range of 10.10.1.2 -
10.10.1.254 with a 24-bit subnet mask.
The ServerIron ADX is connected to the Internet through a router. The outside interface of the
ServerIron ADX has a global IP address of 209.157.1.1. The ServerIron ADX also has a pool of
global IP addresses, which are used to map internal IP addresses.
Minimum required commands for dynamic NAT configuration.
1. Identify an internal and external interface on the ServerIron ADX. In this example, Ethernet 1/2
and 1/1 are used.
int eth 1/2
int eth 1/1
2. Assign IP addresses to the interfaces and define the outside and inside boundaries of the NAT
mechanism.
ServerIronADX(config)# int eth 1/2
ServerIronADX(config-if-1/2)# ip address 209.157.1.1/24
ServerIronADX(config-if-1/2)# ip nat outside
ServerIronADX(config-if-1/2)# int eth 1/1
ServerIronADX(config-if-1/1)# ip address 10.10.10.1/24
ServerIronADX(config-if-1/1)# ip nat inside
On Switch (S) code, enable NAT globally.
ServerIronADX(config)# ip nat inside
On Router (R) code, enable NAT on interfaces (both ip nat inside and outside should be
enabled). The interfaces can also be physical interfaces (not necessarily virtual interfaces).
Remote Server
63.253.63.50
Gateway
VE: 10.10.1/24 (Primary)
209.157.1.1/24 (Secondary)
ServerIron ADX
10.10.1.2
NAT pool IP:
209.157.1.2–209.157.1.30
PC
10.10.1.100
PC
10.10.1.101
Server
10.10.1.102
Server
10.10.1.103
Internet
ip nat inside source list 10 pool out_pool
ip nat pool out_pool 209.157.1.2 209.157.1.30 prefix-len
!
interface ethernet 2
SI ADX
ip address 10.10.1.2 255.255.255.0
ip default-gateway 10.10.1.1
ip nat inside
port-name To-gateway-router
!
interface ethernet 1
port-name Inside-Network
!
access-list 10 permit 10.10.1.0 0.0.0.255
!