为两次静态 NAT44 配置源池和目标池
为两次静态 NAT44 配置 NAT 规则
将服务集配置为两次静态 NAT44
要为两次静态 NAT44 配置源池和目标池,请执行以下操作:
user@host# edit services nat source pool nat-pool-name
[edit services nat source pool nat-pool-name] user@host# set address address-prefix
或
[edit services nat source pool nat-pool-name] user@host# set address address-prefix to address address-prefix
[edit services nat source pool nat-pool-name] user@host# set host-address-base ip-address
例如,如果主机地址基数为 198.51.100.30,而 NAT 池使用的范围是 203.0.113.10 到 203.0.113.20,则 198.51.100.30 表示 203.0.113.10,198.51.100.31 表示 203.0.113.11,依此类推。
user@host# edit services nat destination pool nat-pool-name
[edit services nat destination pool nat-pool-name] user@host# set address address-prefix
allow-overlapping-pools
[edit services nat] user@host# set allow-overlapping-pools
要为两次静态 NAT44 配置源和目标 NAT 规则:
[edit services nat source] user@host# set rule-set rule-set-name rule rule-name
[edit services nat source rule-set rule-set-name] user@host# set match-direction (in | out | in-out)
要指定一个地址或前缀值:
[edit services nat source rule-set rule-set-name rule rule-name] user@host# set match source-address address
要指定地址范围,请使用所需的地址范围配置通讯簿全局地址,并将全局地址分配给 NAT 规则:
[edit services address-book global] user@host# set address address-name range-address lower-limit to upper-limit [edit services nat source rule-set rule-set-name rule rule-name] user@host# set match source-address-name address-name
要指定任何单播地址:
[edit services nat source rule-set rule-set-name rule rule-name] user@host# set match source-address any-unicast
[edit services nat source rule-set rule-set-name rule rule-name] user@host# set match application [application-name]
[edit services nat source rule-set rule-set-name rule rule-name] user@host# set then source-nat pool nat-pool-name
[edit services nat source rule-set rule-set-name rule rule-name then] user@host# set syslog
[edit services nat destination] user@host# set rule-set rule-set-name rule rule-name
[edit services nat destination rule-set rule-set-name] user@host# set match-direction (in | out | in-out)
[edit services nat destination rule-set rule-set-name rule rule-name] user@host# set match destination-address address
[edit services address-book global] user@host# set address address-name range-address lower-limit to upper-limit [edit services nat destination rule-set rule-set-name rule rule-name] user@host# set match destination-address-name address-name
[edit services nat destination rule-set rule-set-name rule rule-name] user@host# set match destination-address any-unicast
[edit services nat destination rule-set rule-set-name rule rule-name] user@host# set then destination-nat pool nat-pool-name
[edit services nat destination rule-set rule-set-name rule rule-name then] user@host# set syslog
要为两次静态 NAT44 配置服务集:
[edit services] user@host# edit service-set service-set-name
[edit services service-set service-set-name] user@host# set interface-service service-interface interface-name
[edit services service-set service-set-name] user@host# set next-hop-service inside-service-interface interface-name outside-service-interface interface-name
[edit services service-set service-set-name] user@host# set nat-rule-sets rule-set-name