Chapter 16: Network Address Translation Configuration Guide

the pools and the SSR automatically chooses a free global IP from the global pool for the local IP.

Dynamic bindings are removed when the flow count goes to zero or the timeout has been reached. The removal of bindings frees the port for that global and the port is available for reuse. When all the ports for that global are used, then ports are assigned from the next free global. If no more ports and globals are available, the packets will be dropped.

Dynamic NAT with DNS

The following example configures a DNS dynamic address binding for outside address 192.50.20.2-192.50.20.9 to inside addresses 10.1.1.0/24:

DNS server static binding of 10.1.1.10 to 192.50.20.10

 

 

 

 

 

 

 

DNS

 

 

 

 

 

 

 

 

 

Server

 

 

 

 

 

 

 

10.1.1.10

 

Router

 

 

 

 

 

 

 

 

 

 

 

IP network 10.1.1.0/24

 

 

 

 

 

 

 

 

 

 

 

et.2.1

et.2.2

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

interface 10-net

 

 

 

 

 

 

 

 

 

 

 

(10.1.1.1/24)

 

 

 

 

 

 

 

 

 

 

 

 

 

 

10.1.1.210.1.1.3

Global Internet

interface 192-net (192.50.20.1/24)

The first step is to create the interfaces:

interface create ip 10-net address-netmask 10.1.1.1/24 port et.2.1 interface create ip 192-net address-netmask 192.50.20.1/24 port et.2.2

Next, define the interfaces to be NAT “inside” or “outside”:

nat set interface 10-net inside nat set interface 192-net outside

Then, define the NAT dynamic rules by first creating the source ACL pool and then configuring the dynamic bindings:

acl lcl permit ip 10.1.1.0/24

nat create dynamic local-acl-pool lcl global-pool 192.50.20.2-192.50.20.9 nat create static local-ip 10.1.1.10 global-ip 192.50.20.10 protocol ip

228

SmartSwitch Router User Reference Manual

Page 254
Image 254
Cabletron Systems 9032578-05 manual Dynamic NAT with DNS, Dns