User manual

5-29
Usage Guidelines
By using the ip access-list parameter you enter the following contexts:
• ext-nacl — Extended ACL. For more details see Extended ACL Instance on page 9-1.
• std-nacl — Standard ACL. For more details see Standard ACL Instance on page 10-1.
•Use clear command to clear the ip dhcp binding.
Network Address Translation (NAT) allows a single device to act as a gateway for internal LAN clients. It
translates the clients internal network IP adresses into the IP address of the NAT enabled device.
RFS7000 supports port NAT and static NAT.
• Static NAT allows host on a private network and is accessible through internet using public IP’s.
• Static NAT assigns a public IP to a host on a private network. It allows a host on a public network to
communicate with the host on the private network, using its public IP.
• Port NAT maps multiple local addresses to a single global address and dynamic port numbers.
Use
ip nat inside to mark VLAN interfaces as an inside interface. The keyword inside defines the VLAN
interface as internal interface. This command is used in the
(config-if) mode, check ip on page 7-9 for
more detials.
Example
The example below creates a named extended IP access list.
RFS7000(config)#ip access-list extended TestACL
RFS7000(config-ext-nacl)#
The example below creates a named standard IP access list.
RFS7000(config)#ip access-list standard TestStdACL
RFS7000(config-std-nacl)#
The example below creates a static NAT translation.
RFS7000(config)#ip nat inside destination static 1.1.1.1 2.2.2.2
RFS7000(config)#
The example below creates a DHCP pool.
RFS7000(config)#ip dhcp pool TestPool
RFS7000(config-dhcp)#
NOTE To delete Standard/Extended and MAC ACL use no access-list <access-list
name>
under the Global Config mode.