352CHAPTER 21: CONFIGURING IP APPLICATION

access control list, then locate the corresponding data pool according to the correlation. Thus, the source address is translated into one address in the data pool and the address translation process is completed. In the translation correlation form, the necessary corresponding information of the translation, including access list, data pool information and the HASH table index corresponding to the address pool are recorded.

HASH table is correlated to the data pool. That is to say, “the data packet that implements address translation using the addresses in the address pool” will have the record recorded in HASH table. During the translation, we can find the data pool that corresponds with the data packet according to the translation relationship. According to the address pool, we can find HASH and records the translation record in the corresponding HASH table. In the restoration process, the address pool can be located according to the destination address. And according to the address pool, the relevant HASH table can be located, to implement restoration operation.

Please carry out the following configuration under interface view.

Table 384 Configure the correlation between the access control list and address pool

Operation

Command

 

 

Add the correlation between the access control list

nat outbound acl-number

and address pool.

address-group pool-name

 

 

Delete the correlation between the access control

undo nat outbound acl-number

list and address pool.

address-group pool-name

 

 

By default, the access control list is not correlated to any address pools.

3Configure the incidence between the access control list and the interface (EASY IP feature)

Configure the correlation between the access control and the interface is also known as EASY IP feature. It refers to taking the IP address of the interface as the translated source address directly during the course of address translation, which is applicable to two conditions. In dial view, the user hopes to take the interface IP address obtained through negotiation as the translated source address; or the user hopes to take the IP address of the interface itself as the translated source address.

Please carry out the following configuration under interface view.

Table 385 Configure the correlation between the access control list and the interface

Operation

Command

 

 

Add the correlation between the access control list and

nat outbound acl-number

interface.

interface

 

 

Delete the correlation between the access control list

undo nat outbound

and interface.

acl-number interface

 

 

By default, the access control list is not correlated to any interface.

4Configure the Internal Server

The user can map the corresponding external address, the external port number etc. to the internal server, to implement function for the external network to visit the internal server. The mapping table between the internal server and external network address and port number is configured by nat server command. During the course of address restoration, the destination address of the external data packet will be looked up according to the configuration of the user. To visit the internal server, it is translated to the destination address and port number of the

Page 356
Image 356
3Com 10014299 manual Nat outbound acl-number, Address-group pool-name, Undo nat outbound acl-number, Acl-number interface