The difference between the NAT server and static NAT is as follows: The NAT server changes only the address but not the port number when an internal device accesses the external network. The device enabled with static NAT changes the IP address and port number when an internal device accesses the external network.
The AR router can be configured with static NAT or the NAT server to implement one-to-one mapping, for example, nat server protocol tcp global 1.1.1.2 21 inside 10.3.0.30 21.
Huawei AR routers support static NAT. Use either of the following methods to configure static NAT:
Method 1: Configure static mapping in the interface view.
Translate the combination of the public IP address 202.10.10.1 and port 200 in TCP packets to the combination of the private IP address 10.10.10.1 and port 300.
[Huawei] interface gigabitethernet 1/0/0
[Huawei-GigabitEthernet1/0/0] nat static protocol tcp global 202.10.10.1 200 inside 10.10.10.1 300
Method 2: Configure static mapping in the system view.
Translate the combination of Loopback 4 interface address and port 43 in TCP packets to private address 192.168.2.55.
[Huawei] nat static protocol tcp global interface loopback 4 43 inside 192.168.2.55 netmask 255.255.255.255
For details on the static NAT configuration, see "NAT Configuration->Configuring NAT->Configuring Static NAT" in Configuration Guide - IP Service.
The configuration of the one-to-one mapping of NAT Server on the USG6000 is as follows:
On the web UI, choose Policy > NAT Policy > Server Mapping.
In the CLI, run the nat server protocol tcp global 1.1.1.2 21 inside 10.3.0.30 21 command.
