Enterasys Networks XSR CLI ip nat source (interface mode

Network Address Translation Commands

5-186 Configuring the Internet Protocol

XSR(config)#ip nat service list 1 ftp tcp port 2021

XSR(config)#access-list 1 permit 10.1.1.1

Thisexamplesetsnon‐standardport2021andstandardport21forFTP.BeawarethatiftheFTP

serverisusingboththedefaultandanotherport,bothportsmustbeconfiguredinNAT.

XSR(config)#ip nat service list 1 ftp tcp port 21

XSR(config)#ip nat service list 1 ftp tcp port 2021

XSR(config)#access-list 1 permit 10.1.1.1

ip nat source (interface mode - NAPT)

ThiscommandappliesPoolNetworkAddressTranslation(NAT)andNetworkAddressPort

Translation(NAPT)rulestoanXSRinterface.Bothstandardandextendedaccesslistsare

supportedaswellasNetworkAddressPortTranslation.

Syntax

ip nat source [list access-list-number]{assigned overload | address ip-address

overload | pool pool_name overload}

Syntax of the “no” Form

ThenocommandremovesNATrulesfromtheinterface:

no ip nat source [list access-list-number]{assigned overload | address ip-address

overload | pool pool_name overload}

Mode

Interfaceconfiguration:XSR(config-if<xx>)#

NoNAT(rule)specifiedfortheinterface.

Example

ThisexampleconfiguresSerialinterface1/0asthesourceIPaddressforoutgoingpackets:

XSR(config)#interface serial 1/0

XSR(config-if<S1/0>)#ip nat source assigned over

list access-

list-number

StandardIPACLnumber.PacketswithsourceaddressesthatpasstheACL

(permittedbythelist)aredynamicallytranslatedusingthelocalglobal

address.IftheACLisnotspecified,thewildcardisassumed.

assigned IPaddressoftheportusedasthesourceIPaddressforoutgoingpackets.

ip-address SpecifiedarbitraryIPaddressusedastheglobalNATIPaddress.

pool pool_name Groupofaddressesfromwhichtheglobaladdresswillbechosen.

overload Whenoverloadisspecified,theselectedglobaladdress(eitherspecifiedor

fromthepool)willbeusedtoperformNAPT,whichrangesfromport

20000to40960.