Dell 3-DNS Especificaciones descargar pdf (Pagina 206)

Chapter 4: Configuring the High-Level Network

4-126

To add a manual SNAT from the command line

The bigpipe snat command defines one SNAT for one or more original IP

addresses, where the original IP address can be either a specific node

address or a VLAN name. To manually add a SNAT using the bigpipe snat

command, use the following syntax.

b snat map <orig_ip>... to <snat_ip>

For example, to define a SNAT for two specific nodes:

b snat map 192.168.75.50 192.168.75.51 to 192.168.100.10

To define a SNAT for two internal VLANs:

b snat map internal1 internal2 to 192.168.102.11

To define a SNAT for both a node address and a VLAN:

b snat map 192.168.75.50 internal2 to 192.168.100.12

To create individual SNAT addresses

Use the following command-line command-line syntaxsyntax to create a

SNAT mapping:

b snat map <orig_ip> [...<orig_ip>] to \

<snat_ip> [vlan <vlan_name> disable | enable] [unit <unit ID>] [netmask <ip>]

If the netmask is different from the external interface default netmask, the

command sets the netmask and derives the broadcast address.

Configuring SNAT automapping

BIG-IP includes a feature called SNAT automapping. When you map a

SNAT automatically, rather than manually, you enable the BIG-IP to choose

the translation IP address. You also enable the BIG-IP to map that

translation address from any of the following:

• One or more specified node address

• One or more VLANs

• A combination of specific node addresses and VLANs

• All node addresses (known as a default SNAT)

SNAT automapping eliminates the need for you to specifically define an IP

address as the translation address.

The SNAT automapping feature is useful in the following cases:

• Where there is a need to ensure that outbound traffic returning through

ISPs or NAT-less firewalls returns through the same ISP or firewall.

• Where a traditional single SNAT address would quickly exhaust the

number of ephemeral ports available. As long as there is more than one

eligible self IP address, SNAT automapping can increase the number of

simultaneous connections possible by using the same ephemeral port on

multiple addresses.

1 2 ... 201 202 203 204 205 206 207 208 209 210 211 ... 425 426

Sin comentarios

Dell 3-DNS Especificaciones Pagina 206