Specifications

NAT Configuration Examples
September 08, 2010 Page 13 of 18
NAT Static Configuration Example
ThisexamplestepsyouthroughaNATstaticconfigurat ionforbothNATandNAPTtranslation
methods.SeeFigure 5onpage 13foradepictionoftheNATstaticconfigurationexamplesetup.
OurstaticNATconfigurationexampleconfigurestwoclients:Client1withNATtranslationand
Client2withNAPTtranslation. Bothclientsareon
theinternalprivatenetworkVLAN 10interface
andcommunicatewithServer1overtheexternalpublicnetworkVLAN100interface.NAT is
enabledonVLAN10asaninsideinterface.NATisenabledonVLAN100asanoutsideinterface.
ThesearetheonlyVLANsoverwhichtranslationoccursforthestatic
portionofthisconfiguration
example.
ToconfigureClient1ontheNATrouter,weenablestaticNATtranslationoftheinsidesource
addressspecifyinglocalIPaddress10.1.1.1andglobalIPaddress200.1.1.1.Server1willonlysee
Client1asIPaddress200.1.1.1.
ToconfigureClient2ontheNATrouter,weenablestatic
NATtranslationoftheinsidesource
addressspecifyinglocalIPaddress10.1.1.2:125andglobalIPaddress200.1.1.2:1025.Server1will
onlyseeClient2asIPaddress200.1.1.2:1025.
Figure 5 NAT Static Configuration Example
Enable NAT Inside and Outside Interfaces
EnableNATinsideinterface:
System(rw)->configure
System(rw-config)->interface vlan 10
System(su-config-intf-vlan.0.10)->ip nat inside
Server1
200.1.1.50
200.1.1.50:80
NAT
ROUTER
DA: 200.1.1.50:80
SA: 200.1.1.2:1025
DA: 200.1.1.2:1025
SA: 200.1.1.50:80
DA: 200.1.1.50:80
SA: 10.1.1.2:125
DA: 10.1.1.2:125
SA: 200.1.1.50:80
Client1
10.1.1.1
DA: 200.1.1.50
SA: 200.1.1.1
VLAN 100
VLAN 10
External
Public
Network
Internal
Private
Network
DA: 200.1.1.1
SA: 200.1.1.50
DA: 200.1.1.50
SA: 10.1.1.1
DA: 10.1.1.1
SA: 200.1.1.50
Client2
10.1.1.2.125