- NAT地址转换
#进入1/0/3接口配置NAT动态地址转换。
[H3C]interface GigabitEthernet 1/0/3
[H3C-GigabitEthernet1/0/3]nat outbound 在出接口下启用nat outbound
[H3C-GigabitEthernet1/0/3]quit
#配置NAT全局策略,实现从trust安全域到untrust安全域的源地址转换,转换方式为easy-ip。
[H3C]nat global-policy
[H3C-nat-global-policy]rule name easy_ip
[H3C-nat-global-policy-rule-easy_ip]source-zone Trust
[H3C-nat-global-policy-rule-easy_ip]destination-zone Untrust
[H3C-nat-global-policy-rule-easy_ip]action snat easy-ip
[H3C-nat-global-policy-rule-easy_ip]quit
[H3C-nat-global-policy]quit