Login
- Table of Contents
-
- 03-Basic Network Configuration
- 01-Layer 2 Static Link Aggregation Configuration Example
- 02-Layer 2 Dynamic Link Aggregation Configuration Example
- 03-PPPoE Client Configuration Example
- 04-Static IPv6 Address Configuration Example
- 05-IPv6 Static Routing Configuration Example
- 06-Static IPv4 DNS Configuration Example
- 07-Static IPv6 DNS Configuration Example
- 08-Dynamic IPv4 DNS Configuration Example
- 09-Dynamic IPv6 DNS Configuration Example
- 10-IPv4 DNS Proxy Configuration Example
- 11-IPv6 DNS Proxy Configuration Example
- 12-Static NAT Configuration Example
- 13-Dynamic NAT Configuration Example
- 14-IPv4 ACL-Based Packet Filter Configuration Example
- 15-IPv6 ACL-Based Packet Filter Configuration Example
- 16-ARP Attack Protection Configuration Example
- 17-ARP Proxy Configuration Example
- 18-IGMP Snooping Configuration Example
- 19-MLD Snooping Configuration Example
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 13-Dynamic NAT Configuration Example | 89.50 KB |
|
|
|
H3C Access Controllers |
|
Comware 7 Dynamic NAT |
|
Configuration Example |
Copyright © 2024 New H3C Technologies Co., Ltd. All rights reserved.
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
The information in this document is subject to change without notice.
Overview
The following information provides an example for configuring dynamic NAT to allow users in the internal network to access the server in the external network.
Prerequisites
The following information applies to Comware 7-based access controllers. Procedures and information in the examples might be slightly different depending on the software or hardware version of the H3C access controllers.
The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.
The following information is provided based on the assumption that you have basic knowledge of NAT.
Example: Configuring dynamic NAT
Network configuration
As shown in Figure 1, a company has a private address 192.168.0.0/16 and two public IP addresses 202.38.1.2 and 202.38.1.3. Configure dynamic NAT to allow only internal users on subnet 192.168.1.0/24 to access the Internet.
Prerequisites
Configure static routes or a dynamic routing protocol on all devices to make sure the network connections are available.
Procedures
1. Configure basic wireless features on the AC. (Details not shown.)
2. Click the System View tab at the bottom of the page.
3. From the navigation pane, select Network Configuration > Network Services > NAT.
4. Click the Add
button 
.
5. Configure a dynamic NAT rule:
a. Specify VLAN-interface 20 as the interface to which the NAT rule is applied.
b. Specify ACL 2000. This ACL identifies packets from 192.168.1.0/24.
c. Add NAT address group 0 with start address 202.38.1.2 and end address 202.38.1.3.
Figure 2 Configuring a dynamic NAT rule
d. Click Apply.
Verifying the configuration
Verify that Client A can access the WWW server and Client B cannot access the WWW server.
Related documentation
H3C Access Controllers Web-Based Configuration Guide
