Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual download pdf (Page 133)

ServerIron ADX NAT64 Configuration Guide 121

53-1002444-02

IP NAT redundancy

DRAFT: BROCADE CONFIDENTIAL

IP NAT redundancy

The ServerIron ADX supports static and dynamic IP NAT in redundant/HA environments using

Hot-Standby mode with switch code, or Sym-Active (Active-Active) mode using VRRP-E with router

code. Further information on VRRP-E can be found in the ServerIron ADX Switch and Router Guide

under section “Configuring VRRP and VRRP-E".

In order to configure IP NAT redundancy with a Hot-Standby deployment, you must specify the

active ServerIron ADX as the owner of the global NAT IP address or pool. Similarly, in Sym-Active

mode, the ServerIron ADX with the higher VRRP-E backup priority must be specified as the NAT IP

address owner. The owner of the NAT IP address is responsible for responding to ARP requests

directed to the redundant public IP address.

Configuring static NAT entry in a HA setup

In a high availability (HA) deployment, the static NAT entry is supported by both of the ServerIron

ADX HA partners.

To configure a static NAT entry, use the ip nat inside source static command with the

<priority-value> parameter as shown in the following example:

ServerIronADX(config)# ip nat inside source static 10.10.10.10 63.32.23.1 2

Syntax: [no] ip nat inside source static <ip-addr1> <ip-addr2> <priority-value>

The <priority-value> is used to determine the owner of the static NAT IP address. A value of either 1

or 2 can be configured with 2 being the higher priority. The ServerIron ADX configured with the

higher priority, is the owner of the NAT IP address as long as it stays up.

Configuring dynamic NAT pool in a HA setup

To configure a dynamic NAT pool which will be supported on a ServerIron ADX pair in HA setup,

enter the ip nat pool command with port-pool-range operand as shown in the following example:

ServerIronADX(config)# ip nat pool pool1 63.23.1.2 63.23.1.4 prefix 24

ServerIronADX(config)# ip nat pool pool1 port-pool-range 2

Syntax: [no] ip nat pool <pool-name> port-pool-range <pool range value>

The port-pool-range <pool range value> parameter is similar to the priority value for static NAT,

except that it also determines the range of source ports allocated for the NAT IP, which prevents

source port collision.

The <pool range value> can be 1 or 2; where 2 has the higher priority. The ServerIron ADX

configured with the higher priority 2 will be the owner of the NAT pool addresses. It also means the

source ports allocated for the NAT IPs are from the higher range.

NOTE

A distribution of port ranges is not required for static NAT, as it does not involve PAT.

Configuring dynamic NAT redundancy in Hot-Standby mode

Follow these steps to enable the minimum required configuration for dynamic NAT in Hot-Standby

mode, as shown in Figure 22.

1 2 ... 128 129 130 131 132 133 134 135 136 137 138 ... 148 149

No comments

Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 133