Configuring outbound net-to-net static NAT
For address translation from a private network to a public network, configure outbound net-to-net static NAT on the interface connected to the external network.
When the source IP address of a packet from the private network matches the private address range, the source IP address is translated into a public address in the public address range.
When the destination IP address of a packet from the public network matches the public address range, the destination IP address is translated into a private address in the private address range.
To configure outbound net-to-net static NAT:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure a net-to-net mapping for outbound static NAT. | nat static outbound net-to-net local-start-address local-end-address [ vpn-instance local-vpn-instance-name ] global global-network { mask-length | mask } [ vpn-instance global-vpn-instance-name ] [ acl { ipv4-acl-number | name ipv4-acl-name } [ reversible ] ] [ disable ] | By default, no mappings exist. If you specify the acl keyword, NAT processes only packets permitted by the ACL. |
3. Return to system view. | quit | N/A |
4. Enter interface view. | interface interface-type interface-number | N/A |
5. Enable static NAT on the interface. | nat static enable | By default, static NAT is disabled. |