NAT settings EcoRouter Documentation / NAT settings
The functionality of NAT port forwarding implies static forwarding of NAT ports (opening ports behind NAT) for organizing remote static access to equipment in the local network through NAT. This functionality allows you to create static (always existing and operating in different directions of traffic transmission) NAT rules for specific source and destination IP addresses, and also specify which TCP/UDP ports this translation is provided for. To create such rules, use the following configuration mode command:
ip nat source static <tcp/udp> <IP src> <port src> <IP dst> <port dst>
The parameters for this command are described in the table below. All parameters are required!
| Parameter | Description |
|---|---|
| tcp или udp | Ключевые слова для указания транспортного протокола |
| IP src | Source IP address |
| port src | Source L4 port. A range of ports can be specified, for which you need to specify the start and end values separated by spaces. The size of the source and destination port ranges must be the same (see example below) |
| IP dst | Destination IP address |
| port dst | Destination L4 port. A range of ports can be specified, for which you need to specify the start and end values separated by spaces. The size of the source and destination port ranges must be the same (see example below) |
The example of NAT port forwarding and dynamic PAT is below.
Configuring PAT:
ecorouter(config)#ip nat pool TEST 10.0.0.0-10.0.0.254
ecorouter(config)#ip nat source dynamic inside pool TEST overload interface wan
ecorouter(config)#interface wan
ecorouter(config-if)# ip address 77.0.0.1/30
ecorouter(config-if)# ip nat outside
ecorouter(config)#interface lan
ecorouter(config-if)# ip address 10.0.0.1/24
ecorouter(config-if)# ip nat inside
The task of organizing remote access to the server's LAN with the address 10.0.0.2 can be solved by creating a static NAT rule and defining specific TCP/UDP ports. The rule that allows connecting to the LAN server from the WAN side, when trying to connect to TCP to the address 77.0.0.1 and L4 port 2222, will look like this:
ecorouter(config)#ip nat source static tcp 10.0.0.2 22 77.0.0.1 2222
Rule with a range of ports example:
ip nat source static tcp 10.0.0.1 100 300 7.0.0.1 400 600
Example of the static source NAT configuration
EcoRouter configuration:
Ports and interfaces settings:
ecorouter(config)#port te0
ecorouter(config-port)#service-instance si0
ecorouter(config-service-instance)#encapsulation untagged
ecorouter(confige)#port te1
ecorouter(config-port)#service-instance si1
ecorouter(config-service-instance)#encapsulation untagged
ecorouter(config)#interface in
ecorouter(config-if)#ip address 10.10.10.1/24
ecorouter(config-if)#ip nat inside
ecorouter(config-if)#connect port te0 service-instance si0
ecorouter(config)#interface out
ecorouter(config-if)#ip address 20.20.20.1/24
ecorouter(config-if)#ip nat outside
ecorouter(config-if)#connect port te1 service-instance si1
Setting the static translation:
ecorouter(config)#ip nat source static 10.10.10.10 20.20.20.21
Example of the static source PAT configuration
EcoRouter configuration.
Ports and interfaces configuration:
ecorouter(config)#port te0
ecorouter(config-port)#service-instance si0
ecorouter(config-service-instance)#encapsulation untagged
ecorouter(confige)#port te1
ecorouter(config-port)#service-instance si1
ecorouter(config-service-instance)#encapsulation untagged
ecorouter(config)#interface in
ecorouter(config-if)#ip address 10.10.10.1/24
ecorouter(config-if)#ip nat inside
ecorouter(config-if)#connect port te0 service-instance si0
ecorouter(config)#interface out
ecorouter(config-if)#ip address 20.20.20.1/24
ecorouter(config-if)#ip nat outside
ecorouter(config-if)#connect port te1 service-instance si1
Creating the address pool for incoming traffic:
ecorouter(config)#ip nat pool POOL 10.10.10.0-10.10.10.20
Configuring the translation rules:
ecorouter(config)#ip nat source dynamic inside pool POOL overload 20.20.20.21