Configuring inbound one-to-one static NAT
For address translation from a public IP address to a private IP address, configure inbound one-to-one static NAT.
When the source IP address of a packet from the public network to the private network matches the global-ip, the source IP address is translated into the local-ip.
When the destination IP address of a packet from the private network to the public network matches the local-ip, the destination IP address is translated into the global-ip.
To configure inbound one-to-one static NAT:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure a one-to-one mapping for inbound static NAT. | nat static inbound global-ip [ vpn-instance global-vpn-instance-name ] local-ip [ vpn-instance local-vpn-instance-name ] [ acl { ipv4-acl-number | name ipv4-acl-name } [ reversible ] ] [ disable ] | By default, no mappings exist. If you specify the acl keyword, NAT processes only packets permitted by the ACL. |
3. Return to system view. | quit | N/A |
4. Enter interface view. | interface interface-type interface-number | N/A |
5. Enable static NAT on the interface. | nat static enable | By default, static NAT is disabled. |