Product specifications
Efficient Networks
®
Router family
Technical Reference Guide
Chapter 4: System Management
Efficient Networks
®
Page 4-27
Viewing Policies
The policy listing is sorted by policy number; showing more specific policies first
followed by the more general policies. To list the Selective NAT policies, use the
following command:
system selnat list
The following response would be displayed from the examples policies added
previously:
Deleting Policies
Policies are deleted based on the policy number. To delete a policy, use the following
command:
system selnat delpolicy <policy number>
NetMeeting (H.323) with NAT
NetMeeting is an application that uses the TCP protocol H.323 (and, for certain
options, T.120). If all NetMeeting connections are outgoing, NAT does not interfere
and no additional configuration is needed. However, if incoming NetMeeting calls from
outside the local LAN are to be received, NAT needs additional directions from you.
NAT prevents requests coming from outside the LAN from connecting to private
addresses on the LAN unless you specify the connections that are to be allowed.To
receive NetMeeting audio and video connections from outside the local LAN while
NAT is enabled, you must enter commands to direct the outside connections. To do
this, you would enter commands to either:
• direct connections for TCP ports 1720 (h323) and 1503 (t120), or
• map a public IP address to a private IP address on the LAN.
Scenario 1: Global Server Connection
Let’s suppose you want one private IP address on the local LAN to receive
NetMeeting audio and video connections from outside the LAN while NAT is enabled.
To allow this, you specify the IP address on the following command:
-> system addserver <ipaddr> tcp h323
The NetMeeting options, Share Program, Chat, Whiteboard, and Transfer Files use
the TCP protocol T.120. To use these options, enter another command specifying the
IP address, as follows:
-> system selnat list
Remote address Action
1. 10.2.2.2/255.255.255.255 No Translation
2. 12.16.32.0/255.255.255.0 Transle to 64.35.6.1
3. 0.0.0.0/0.0.0.0 Transle to 12.35.10.1