|
ru.cisco
- RU.CISCO ---------------------------------------------------------------------
From : Dmitry Valdov 2:5015/28 26 Feb 2002 01:08:36
To : Dmitry Valdov
Subject : Re: one-way NAT
--------------------------------------------------------------------------------
Dmitry Valdov <dv@dv.ru> wrote:
>> Hе подскжет-ли кто-нибудь как можно сделать NAT односторонним. Т.е. менять
>> Destination Address перед тем как пакет
>> попадает в нашу сеть, но оставлять пакет без изменений на выходе.
> ip nat outside destination list XX pool YY [rotary]
> Если я правильно понял задачу.
Хмм. Странно, рутер это не переварил. А вот в книжке по CCNP "Remote Access"
так и написано. В контексте "Load Distribution". Hичего не понимаю.
===
The configuration is straightforward. Any packet that arrives at Company AВs
Internet router,
which has a destination for the 188.88.88.88 host, is translated in a rotary
fashion to one of the
four mirrored servers. The configuration in Example 11-5 shows the syntax
for this
implementation.
You should note that the declaration statement for the translation specifies
that the destination
address should be checked against list 1, not the source address as in
previous configurations.
In addition, the argument rotary is placed at the end of the declaration. In
this fashion, each
incoming packet is translated to one of the pool members in a recurring
sequential fashion; thus,
a load distribution is achieved over the four servers.
You should note that the router does not keep track of the availability of
the destination
addresses assigned to it in the ГpoolД; hence, any change to the number of
rotary members or
the internal configuration must be reflected in the router definitions.
Example 11-5 NAT TCP Load Distribution Implementation
!declare the pool
ip nat pool company-A 188.88.88.1 188.88.88.4 prefix-length 24
!declare the translation
ip nat outside destination list 1 pool company-A rotary
!declare the access-list for translation candidates
access-list 1 permit 188.88.88.88 0.0.0.0
!declare the interfaces
interface S0
ip nat outside
interface E0
ip nat inside
===
Dmitry.
--- ifmail v.2.15dev5
* Origin: Commercial Information Networks (2:5015/28@fidonet)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
