[NAT configuration share]share a simple easy-ip NAT configuration on NE router.

Latest reply: Jul 8, 2018 13:39:13 609 1 0 0

I'd like to share a simple NAT configuration on NE router, Here we configure easy-IP mode for NAT pool, which means that NAT will choose the interface IP address to make the NAT.

1. create NAT instance, Binding a Service Board to a NAT Instance


[~HUAWEI] service-location 1

[*HUAWEI-service-location-1] location slot 1

[*HUAWEI-service-location-1] commit

[~HUAWEI-service-location-1] quit

 

[~HUAWEI] service-instance-group group1

[*HUAWEI-service-instance-group-group1] service-location 1

[*HUAWEI-service-instance-group-group1] commit

[~HUAWEI-service-instance-group-group1] quit

 

[~HUAWEI] nat instance nat1 id 1

[*HUAWEI-nat-instance-nat1] service-instance-group group1

[*HUAWEI-nat-instance-nat1] commit

[~HUAWEI-nat-instance-nat1] quit

 

 

 2. configure easy IP NAT pool, here we suppose the outbound interface is 0/2/1


[~HUAWEI] nat instance nat1 id 1

[*HUAWEI-nat-instance-cpe1] nat address-group group1 group-id 1 unnumbered interface GigabitEthernet 0/2/1

 

 3. confiure ip address for outbound interface:


[~HUAWEI] interface gigabitEthernet 0/2/1

[~HUAWEI-GigabitEthernet0/2/1] ip address 120.10.10.143 255.255.255.0

[*HUAWEI-GigabitEthernet0/2/1] commit

[~HUAWEI-GigabitEthernet0/2/1] quit

 

4. configure ACL to match the traffic that need to do the NAT:


[~HUAWEI] acl 3001

[*HUAWEI-acl4-advance-3001] rule 5 permit ip source 10.91.100.0 0.0.0.255

[*HUAWEI-acl4-advance-3001] commit

[~HUAWEI-acl4-advance-3001] quit


5. apply NAT at the outbound interface: 


[~HUAWEI] interface gigabitEthernet 0/2/1

[*HUAWEI-GigabitEthernet0/2/1] ip address 120.10.10.143 255.255.255.0

[*HUAWEI-GigabitEthernet0/2/1] nat bind acl 3001 instance nat1

[*HUAWEI-GigabitEthernet0/2/1] commit

[~HUAWEI-GigabitEthernet0/2/1] quit


From group: Router
  • x
  • convention:

KarimUC
Created Jul 8, 2018 13:39:13 Helpful(0) Helpful(0)

good case
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login