搜档网
当前位置:搜档网 › 华为防火墙NAT转换

华为防火墙NAT转换

华为防火墙NAT转换:
system-view
//进入全局视图

[USG]nat address -group 1 202.168.0.10 202.168.0.20
//配置编号为1的NAT地址池,包含NAT转换使用的公有地址

[USG]nat-policy interzone trust untrust outbound
//定义一个区域间的nat策略

[USG-nat-policy-interzone-trust-untrust-outbound]policy 1
[USG-nat-policy-interzone-trust-untrust-outbound-1]policy source 192.168.0.0 mask 24
//定义要进行nat转换的源IP地址的范围

[USG-nat-policy-interzone-trust-untrust-outbound-1]action source-nat
//开启nat转换

[USG-nat-policy-interzone-trust-untrust-outbound-1]address-group 1 no-pat
//绑定地址池

相关主题