2012-08-07
1)Static conversion
nat create static protocol ip|tcp|udp local-ip <local-ip-addr/address range> global-ip<global-ip-addr/address range> [local-port <tcp/udp-local-port>|any] [global-port <tcp/udp-global-port> |any] [matches-in-interface <interface>] [matches-out-interface <interface>]
2)Dynamic conversion
nat create dynamic local-acl-pool <local-acl> global-pool <ip-addr/ip-addr-range/ip-addr-list> [enable-ipoverload] [matches-in-interface <interface>] [matches-out-interface <interface>]
It is seen from the above commands that acl must be configured during dynamic conversion as shown in the following examples.
acl nat1 permit ip 192.168.1.0/24
nat set interface tone40 outside
nat set dynamic-binding-timeout 30
nat set interface zhuanxian inside
nat create dynamic local-acl-pool nat1 global-pool 219.148.190.89-219.148.190.94 enable-ip-overload
Previous: Does the working mode of 28S port impact rate limit? Next: What to note while configuring LACP for device of C-series?