Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual download pdf (Page 126)

114 ServerIron ADX NAT64 Configuration Guide

53-1002444-02

Configuring NAT

DRAFT: BROCADE CONFIDENTIAL

Figure 18 shows a dynamic NAT configuration on a ServerIron ADX, running with switch code. The

ServerIron ADX is connected to the Internet through a router. The private network—also referred to

as the inside network—consists of IP addresses in the range 10.10.1.2 through 10.10.1.254, with a

24-bit subnet mask. A pool of global addresses in the range of 209.157.1.2 through 209.157.1.30

is configured on the ServerIron ADX, which is used to translate the private network.

Minimum required commands for dynamic NAT configuration with switch code:

1. Configure a numbered ACL and permit the IP addresses on the inside.

ServerIronADX(config)# access-list 101 permit ip 10.10.1.0/24 any

Make sure you specify the permit parameter in the ACL, rather than the deny parameter. If you

specify the deny parameter, the ServerIron ADX will not provide NAT for the addresses.

2. Define the global address pool.

ServerIronADX(config)# ip nat pool global_pool 209.157.1.2 209.157.1.30

prefix-length 24

3. Tie the inside source list to the global pool and enable PAT (overload).

ServerIronADX(config)# ip nat inside source list 101 pool global_pool overload

4. Enable dynamic NAT globally on the ServerIron ADX.

ServerIronADX(config)# ip nat inside

5. Assign a secondary IP address from the public IP subnet on the next hop router’s interface,

which is connected to the ServerIron ADX, as shown in Figure 18.

You may log into the barrel processor (BP) using rconsole and verify that the translation is working

correctly. Enter a command such as the one in the following example.

ServerIronADX# rconsole 1/1

ServerIronADX1/1#show ip nat statistic

ServerIronADX1/1#show ip nat translation

Dynamic NAT configuration example 2

Figure 19 shows dynamic NAT configuration on a ServerIron ADX running on router code,

translating inside hosts in the 20.20.0.0/16 network to a pool of global addresses in the

15.15.15.15/24 network.

1 2 ... 121 122 123 124 125 126 127 128 129 130 131 ... 148 149

No comments

Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 126