How Do I Configure All-Port Mapping?

Latest reply: Jun 25, 2019 13:08:15 68 1 12 1

Procedure

# Configure NAT server on a public network interface to map public IP address 1.1.1.1 with all TCP ports to private IP address 192.168.0.1 with all ports.

<Huawei> system-view

[Huawei] interface gigabitethernet 1/0/0

[Huawei-GigabitEthernet1/0/0] nat server protocol tcp global 1.1.1.1 inside 192.168.0.1

More information

If an enterprise has two or more allocatable public IP addresses and an internal server needs to provide services to public network users, all-port mapping can be configured for one of public IP addresses. If you do not specify the range of port numbers opened to public network users in the nat server command, all ports of the internal server are mapped to the same public IP address. That is, the server provides all types of services to public network users using the public IP address with all port numbers.

If the IP address of a public network interface is used to provide services to public network users, configuring all-port mapping on this interface will cause failures of public network users to access the web pages or other services on the AR router, because all port numbers associated with the IP address are mapped to the internal server. Therefore, if only one public IP address is available, you are advised to configure mapping of specific port numbers.

All-port mapping configuration enables you to map multiple ports at one time, but this configuration lowers the network security because all ports are opened to the public network.


  • x
  • convention:

Shaka0710 Created Jun 25, 2019 13:08:15 Helpful(0) Helpful(0)

Very good, It's very practical.
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

Login and enjoy all the member benefits

Login
Fast reply Scroll to top