NAT with dynamic routing on AR series routers

Hello,
You can use the port address, but not the loopback address, as the outbound interface address when configuring the NAT outbound interface address.

Glad to help you! Any further questions, let us know.

Example for Configuring NAT Static and Outbound NAT to Implement Communication Between Public Network Users and Servers
Applicability
This example applies to all versions and AR routers.

Networking Requirements
As shown in Figure 3-6, an FTP server is deployed on the Internet and the router functions as the enterprise egress gateway. To ensure security, the enterprise requires that service traffic between public network users and FTP server be forwarded through the router and IP addresses of the public network user and server are not detected.

Figure 3-6 Networking for configuring NAT static and outbound NAT to implement communication between public network users and servers

Procedure:

1. 1. Configure the router.

   
   

   #
    sysname Router
   #                                                                               
   acl number 2000                                                                 
    rule 5 permit source any                                     
   #                                                                               
   interface GigabitEthernet1/0/0                                                  
    ip address 2.2.2.1 255.255.255.0                                            
    nat outbound 2000  //Configure outbound NAT and map the actual IP address of the user to the IP address of GE1/0/0.                    
   #                                                                               
   interface GigabitEthernet2/0/0                                                  
    ip address 1.1.1.1 255.255.255.0                                            
    nat static global current-interface inside 2.2.2.2  //Configure NAT static and map the actual IP address of the FTP server to the IP address of GE2/0/0.      
   #                                                                               
   return

    2. Verify the configuration.

# Run the display nat outbound command on the router.

<Router> display nat outbound
 NAT Outbound Information:
 -----------------------------------------------------------------
 Interface                     Acl      Address-group/IP/Interface      Type
 GigabitEthernet1/0/0        2000                     2.2.2.1      easyip     
 --------------------------------------------------------------------------     
  Total : 1

# Run the display nat static command on the router.

<Router> display nat static
  Static Nat Information:                                                       
  Interface  : GigabitEthernet0/0/0                                             
    Global IP/Port     : current-interface/---- (Real IP : 1.1.1.1)      
    Inside IP/Port     : 2.2.2.2/----                                        
    Protocol : ----                                                             
    VPN instance-name  : ----                                                   
    Acl number         : ----                                                   
    Vrrp id            : ----                                                   
    Netmask  : 255.255.255.255                                                  
    Description : ----                                                          
                                                                                
  Total :    1

https://support.huawei.com/enterprise/en/doc/EDOC1100098908/99f06e78/example-for-configuring-nat-static-and-outbound-nat-to-implement-communication-between-public-network-users-and-servers

https://support.huawei.com/enterprise/en/doc/EDOC1000177797/ee01cd2a/example-for-configuring-dynamic-nat

As I described in first message I can't use this configuration:
interface GigabitEthernet1/0/0
ip address 2.2.2.1 255.255.255.0
nat outbound 2000
There is only ip address for P2P with ISP. Usually ISP's block traffic from P2P except it's BGP messages.
I asked about documentation or configuration where I can use ip address on a loopback or other kind of virtual interface as an outbound address for NAT

Hi @Kolesa

I got your problem,your problem will solve if you use loopback interface as BGP peer instead phy interface ip addres.

In order to use Loopback interface you have to run below command

peer 10.1.1.1 connect-interface loopback 32

Also i attached below link you can find explenation

https://support.huawei.com/hedex/hdx.do?lib=EDOC1100007341NEH0305P&docid=EDOC1100007341&lang=en&v=09&tocLib=EDOC1100007341NEH0305P&tocV=09&id=dc_cfg_bgp_0006&tocURL=resources/dc/dc_cfg_bgp_0006.html&p=t&fe=1&ui=3&keyword=bgp%2Bloopback%2Binterface