User Manual

382
Users Manual of XGS-6350-24X4C
outside network.
2. Configuring dynamic transfer
Run the following commands in global configuration mode to configure dynamic outside source address
transfer:
Run… To…
ip nat poolname start-ip end-ip
netmask
Define a to-be-distributed local address
pool according to requirements.
ip access-list
standardaccess-list-namepermit
source [source-mask]
Define a standard access list.
ip nat outside source
listaccess-list-name poolname
Create dynamic outside source address
transfer and decide the access list
previously defined.
interfacetypenumber
Specify the inside interface.
ip nat inside
Label the interface as one to connect the
inside network.
interface type number
Specify the outside interface.
ip nat outside
Label the interface as one to connect the
outside network.
Only those transferable addresses can be contained in the access list (remember
that an implicit item “deny all” exists at the end of each access list). The random
access list may lead to unexpected results.
For details, refer to section“Overlapping Address Translation Example”.
43.2.3.4 Providing TCP Load Balance
Another fashion of using NAT is unrelated to the Internet address. Your organization may have multiple hosts
to communicate with a frequently used host. In this case, you can use NAT technology to create a virtual host
in the inside network, helping the load balance among actual hosts. You need to replace the destination
address of the access list with the address in the cycle address pool. The distribution is complete in a cycle
when a new connection from the outside to the inside is opened. The non-TCP communication need not be
translated (unless other translations are effective). The following figure illustrates the attribute.