Coyote Point Systems Equalizer Especificaciones Pagina 92

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 594
  • Tabla de contenidos
  • SOLUCIÓN DE PROBLEMAS
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 91
Network Configuration
Outbound NAT allows the administrator to associate two subnets together using the outbound_nat parameter. This
parameter is configured on the internal network, and is set to one of the Equalizer IP addresses of the external
network.
eqcli > vlan internal subnet net outbound_nat 10.0.0.68 eqcli: 12000287:
Operation successful
This command can be read as "when sending packets from the internal network to any network which is reached
through the external network, use the IP address 10.0.0.68 instead of the original source IP address of the packet".
Two additional features must be configured before Outbound NAT will function properly.
First, because the packets are still coming from the internal network, source routing for this network must be
adjusted to really use the gateway of the external network:
eqcli > vlan internal subnet net default_route 10.0.0.254 eqcli: 12000287:
Operation successful
Second, Outbound NAT means that now we are taking packets from the internal network and sending them out of
the external network. This means that the packets are routed, and we need to enable permissions between the
networks:
eqcli > vlan internal subnet net permit external:net eqcli: 12000287:
Operation successful
eqcli > vlan external subnet net permit internal:net eqcli: 12000287: Operation
successful
Note that the permissions need to be set on both sides - the internal network is configured to allow traffic from the
external network, and the external network is configured to allow traffic from the internal network.
Now we can analyze the changes to the running configuration that we have made. First, we enabled Outbound
NAT:
IP NAT Rules:
List of active MAP/Redirect filters:
map wm0 192.168.211.0/24 -> 10.0.0.68/32 proxy port ftp ftp/tcp
map wm0 192.168.211.0/24 -> 10.0.0.68/32 portmap tcp/udp auto
map wm0 192.168.211.0/24 -> 10.0.0.68/32
92
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Vista de pagina 91
1 2 ... 87 88 89 90 91 92 93 94 95 96 97 ... 593 594

Comentarios a estos manuales

Sin comentarios