Configuring outbound one-to-one static NAT
For address translation from a private IP address to a public IP address, configure outbound one-to-one static NAT on the interface connected to the external network.
When the source IP address of a packet from the private network matches the local-ip, the source IP address is translated into the global-ip.
When the destination IP address of a packet from the public network matches the global-ip, the destination IP address is translated into the local-ip.
To configure outbound one-to-one static NAT:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure a one-to-one mapping for outbound static NAT. | nat static outbound local-ip [ vpn-instance local-vpn-instance-name ] global-ip [ vpn-instance global-vpn-instance-name ] [ acl { ipv4-acl-number | name ipv4-acl-name } [ reversible ] ] [ disable ] | By default, no mappings exist. If you specify the acl keyword, NAT processes only packets matching the permit rule in the ACL. |
3. Return to system view. | quit | N/A |
4. Enter interface view. | interface interface-type interface-number | N/A |
5. Enable static NAT on the interface. | nat static enable | By default, static NAT is disabled. |