Avaya Configuring BFE Services User Manual

Configuring GRE, NAT, RIPSO, and BFE ServicesPart No. 305753-A Rev 00April 1999BayRS Version 13.20Site Manager Software Version 7.20BCC Version 4.20

Configuring GRE, NAT, RIPSO, and BFE Services3-56305753-A Rev 00Using the BCCTo configure N-to-1 translation:1.Configure a local address range (see “A

Configuring Network Address Translation305753-A Rev 003-57 Using Site ManagerTo configure N-to-1 translation, complete the following tasks:Site Manage

Configuring GRE, NAT, RIPSO, and BFE Services3-58305753-A Rev 00Customizing NAT Synchronization ParametersTo customize the way NAT synchronization ope

Configuring Network Address Translation305753-A Rev 003-59 If you enable synchronization without entering a synchronized router ID, the router automat

Configuring GRE, NAT, RIPSO, and BFE Services3-60305753-A Rev 00Using Site ManagerYou must configure an IP interface on the router before enabling NAT

Configuring Network Address Translation305753-A Rev 003-61 Using the BCCTo set a synchronized router ID, navigate to the global NAT prompt (for exampl

Configuring GRE, NAT, RIPSO, and BFE Services3-62305753-A Rev 00Setting the Synchronization PortThe default TCP port value for connections between syn

Configuring Network Address Translation305753-A Rev 003-63 Customizing Keepalive ParametersNAT synchronization uses keepalive messages to recognize an

Configuring GRE, NAT, RIPSO, and BFE Services3-64305753-A Rev 00To reset the keepalive retry count, navigate to the global NAT prompt and enter:synch-

Configuring Network Address Translation305753-A Rev 003-65 Configuring NAT Synchronization PeersNAT synchronization peers are the routers that this ro

305753-A Rev 00xiFiguresFigure 2-1. Simple GRE Tunnel Components ... 2-2Figure 2-2. GRE Tunne

Configuring GRE, NAT, RIPSO, and BFE Services3-66305753-A Rev 00Using Site ManagerTo add a router to the list of synchronized peer routers, complete t

Configuring Network Address Translation305753-A Rev 003-67 Enabling and Disabling NAT Synchronization PeersEnabling a peer allows this router to send

Configuring GRE, NAT, RIPSO, and BFE Services3-68305753-A Rev 00Using Site ManagerTo enable or disable a peer router, complete the following tasks:Sit

Configuring Network Address Translation305753-A Rev 003-69 Deleting NAT Synchronization PeersUse the BCC or Site Manager to delete synchronization pee

305753-A Rev 004-1 Chapter 4Configuring RIPSO on an IP InterfaceBy default, RIPSO is disabled on IP interfaces. You can use Site Manager to enable RIP

Configuring GRE, NAT, RIPSO, and BFE Services4-2305753-A Rev 00Security Label FormatA RIPSO security label is three or more bytes long and specifies t

Configuring RIPSO on an IP Interface305753-A Rev 004-3 The first 7 bits (0 through 6) are flags. Each flag represents a protection authority. The flag

Configuring GRE, NAT, RIPSO, and BFE Services4-4305753-A Rev 00Inbound IP DatagramsWhen the router receives an IP datagram on a RIPSO interface, it co

Configuring RIPSO on an IP Interface305753-A Rev 004-5 Originated IP DatagramsWhen the router originates a datagram and the following conditions are t

Configuring GRE, NAT, RIPSO, and BFE Services4-6305753-A Rev 00Enabling and Disabling RIPSOUse Site Manager to enable or disable RIPSO on an interface

Configuring RIPSO on an IP Interface305753-A Rev 004-7 Specifying the IP Datagram Type for Stripping Security OptionsUse Site Manager to choose the ty

Configuring GRE, NAT, RIPSO, and BFE Services4-8305753-A Rev 00Specifying the Outbound Datagram Type Requiring Security LabelsUse Site Manager to spec

Configuring RIPSO on an IP Interface305753-A Rev 004-9 Specifying the Inbound Datagram Type Requiring Security LabelsUse Site Manager to specify the t

Configuring GRE, NAT, RIPSO, and BFE Services4-10305753-A Rev 00Setting the Security Level for IP DatagramsUse Site Manager to specify the minimum and

Configuring RIPSO on an IP Interface305753-A Rev 004-11 Choosing Authority Flags in Outbound DatagramsUse Site Manager to specify which authority flag

Configuring GRE, NAT, RIPSO, and BFE Services4-12305753-A Rev 00Choosing Authority Flags in Inbound DatagramsUse Site Manager to specify which authori

Configuring RIPSO on an IP Interface305753-A Rev 004-13 Supplying Implicit Labels for Unlabeled Inbound DatagramsUse Site Manager to specify whether t

Configuring GRE, NAT, RIPSO, and BFE Services4-14305753-A Rev 00Enabling and Disabling Default Labels for Unlabeled Outbound DatagramsUse Site Manager

Configuring RIPSO on an IP Interface305753-A Rev 004-15 Enabling and Disabling Error Labels for Outbound ICMP Error DatagramsUse Site Manager to speci

305753-A Rev 00xiiiTablesTable 3-1. NAT Log Message Types ...3-26Table 5-1. BFE X

Configuring GRE, NAT, RIPSO, and BFE Services4-16305753-A Rev 00RIPSO ExampleThe router in Figure 4-2 has RIPSO configured on all three IP interfaces.

Configuring RIPSO on an IP Interface305753-A Rev 004-17 Figure 4-2. RIPSO Example1.1.0.11.1.0.21.2.0.1 1.3.0.11.1.0.1Forward outbounddatagram? Ye

305753-A Rev 005-1 Chapter 5Connecting the Router to a Blacker Front EndBlacker front end devices provide encryption services for connections over the

Configuring GRE, NAT, RIPSO, and BFE Services5-2305753-A Rev 00The router-to-BFE interface is a modified version of the interface presented in the 198

Connecting the Router to a Blacker Front End305753-A Rev 005-3 Configuring Blacker Front-End Support To configure BFE support on an IP interface, you

Configuring GRE, NAT, RIPSO, and BFE Services5-4305753-A Rev 00For instructions on performing steps 1 through 4, see Configuring X.25 Services. For in

Connecting the Router to a Blacker Front End305753-A Rev 005-5 Outgoing SVC LCN Start Parameter is ignored.Number of PVC channels Zero (0). BFE does n

Configuring GRE, NAT, RIPSO, and BFE Services5-6305753-A Rev 00Full Addressing OnAcceptance Format DefextRelease Format DefextCCITT (now ITU-T) Confor

Connecting the Router to a Blacker Front End305753-A Rev 005-7 Packet Size Options include 128, 256, 512, and 1024. If you want to use a value other t

305753-A Rev 00A-1 Appendix ASite Manager ParametersThis appendix contains the Site Manager parameter descriptions for GRE, NAT, and RIPSO. You can di

Configuring GRE, NAT, RIPSO, and BFE ServicesA-2305753-A Rev 00The Technician Interface allows you to modify parameters by issuing set and commit comm

Site Manager Parameters305753-A Rev 00A-3 To access the GRE Create Tunnels List window, complete the following tasks: Site Manager ProcedureYou do thi

Configuring GRE, NAT, RIPSO, and BFE ServicesA-4305753-A Rev 00Remote Connection ParametersThe Create GRE Remote Connection window (Figure A-2) allows

Site Manager Parameters305753-A Rev 00A-5 To access the Create GRE Remote Connection window, complete the following tasks: Site Manager ProcedureYou d

Configuring GRE, NAT, RIPSO, and BFE ServicesA-6305753-A Rev 00Parameter: Remote Physical IP AddressPath: Configuration Manager > Protocols > IP

Site Manager Parameters305753-A Rev 00A-7 NAT ParametersNAT parameters are described in the following sections:NAT Global ParametersThe NAT Base Group

Configuring GRE, NAT, RIPSO, and BFE ServicesA-8305753-A Rev 00To access the NAT Base Group Record window, complete the following tasks:Site Manager P

Site Manager Parameters305753-A Rev 00A-9 Parameter: Log MaskPath: Configuration Manager > Protocols > IP > NAT > GlobalDefault: NoneOptio

305753-A Rev 00xv PrefaceThis guide describes the following services and what you do to start and customize them on a Bay Networks® router:• Generic R

Configuring GRE, NAT, RIPSO, and BFE ServicesA-10305753-A Rev 00Parameter: SynchronizationPath: Configuration Manager > Protocols > IP > NAT

Site Manager Parameters305753-A Rev 00A-11 Parameter: Keep Alive IntervalPath: Configuration Manager > Protocols > IP > NAT > GlobalDefaul

Configuring GRE, NAT, RIPSO, and BFE ServicesA-12305753-A Rev 00NAT Interface ParametersThe NAT Interface List window (Figure A-4) allows access to NA

Site Manager Parameters305753-A Rev 00A-13 Parameter: EnablePath: Configuration Manager > Protocols > IP > NAT > InterfaceDefault: EnableO

Configuring GRE, NAT, RIPSO, and BFE ServicesA-14305753-A Rev 00NAT Static Translation ParametersThe NAT Static Translation List window (Figure A-5) a

Site Manager Parameters305753-A Rev 00A-15 Parameter: Local AddressPath: Configuration Manager > Protocols > IP > NAT > Static > AddDef

Configuring GRE, NAT, RIPSO, and BFE ServicesA-16305753-A Rev 00Parameter: Mapping ProtocolPath: Configuration Manager > Protocols > IP > NAT

Site Manager Parameters305753-A Rev 00A-17 NAT Dynamic Translation Local Address Range ParametersThe NAT Local Address Range List window (Figure A-6)

Configuring GRE, NAT, RIPSO, and BFE ServicesA-18305753-A Rev 00Parameter: IP AddressPath: Configuration Manager > Protocols > IP > NAT >

Site Manager Parameters305753-A Rev 00A-19 NAT Dynamic Translation Global Address Range ParametersThe NAT Global Address Range List window (Figure A-7

Configuring GRE, NAT, RIPSO, and BFE Servicesxvi305753-A Rev 00Text ConventionsThis guide uses the following text conventions:angle brackets (< >

Configuring GRE, NAT, RIPSO, and BFE ServicesA-20305753-A Rev 00To access the NAT Global Address Range List window, complete the following tasks:Site

Site Manager Parameters305753-A Rev 00A-21 NAT Synchronization Peer ParametersThe NAT Synchronization Peer List window (Figure A-8) allows access to p

Configuring GRE, NAT, RIPSO, and BFE ServicesA-22305753-A Rev 00To access the NAT Synchronization Peer List window, complete the following tasks:Site

Site Manager Parameters305753-A Rev 00A-23 Parameter: Peer DisablePath: Configuration Manager > Protocols > IP > NAT > Synch PeerDefault:

Configuring GRE, NAT, RIPSO, and BFE ServicesA-24305753-A Rev 00RIPSO ParametersThe IP Interface List window (Figure A-9) allows access to parameters

Site Manager Parameters305753-A Rev 00A-25 Parameter: Enable SecurityPath: Configuration Manager > Protocols > IP > InterfacesDefault: Enable

Configuring GRE, NAT, RIPSO, and BFE ServicesA-26305753-A Rev 00Parameter: Require Out SecurityPath: Configuration Manager > Protocols > IP >

Site Manager Parameters305753-A Rev 00A-27 Parameter: Minimum LevelPath: Configuration Manager > Protocols > IP > InterfacesDefault: Unclassi

Configuring GRE, NAT, RIPSO, and BFE ServicesA-28305753-A Rev 00Parameter: Must Out AuthorityPath: Configuration Manager > Protocols > IP > I

Site Manager Parameters305753-A Rev 00A-29 Parameter: Must In AuthorityPath: Configuration Manager > Protocols > IP > InterfacesDefault: No a

Preface305753-A Rev 00xvii AcronymsThis guide uses the following acronyms:italic text Indicates file and directory names, new terms, book titles, and

Configuring GRE, NAT, RIPSO, and BFE ServicesA-30305753-A Rev 00Parameter: Implicit LabelPath: Configuration Manager > Protocols > IP > Inter

Site Manager Parameters305753-A Rev 00A-31 Parameter: Implicit LevelPath: Configuration Manager > Protocols > IP > InterfacesDefault: Unclass

Configuring GRE, NAT, RIPSO, and BFE ServicesA-32305753-A Rev 00Parameter: Default AuthorityPath: Configuration Manager > Protocols > IP > In

Site Manager Parameters305753-A Rev 00A-33 Parameter: Error LabelPath: Configuration Manager > Protocols > IP > InterfacesDefault: EnableOpti

305753-A Rev 00Index-1Aaccept policies, configuring for GRE tunnels, 2-5, 2-6acronyms, xviiannounce policies, configuring for GRE tunnels, 2-5announce

Index-2305753-A Rev 00EEnable parameterGRE remote tunnel end point, 2-19, A-5GRE tunnel, 2-10, A-4NAT global, 3-23, A-8NAT global address range, 3-51,

305753-A Rev 00Index-3MMapping Entry Timeout parameter (NAT global), A-9Mapping Protocol parameter (NAT static address translation), A-16Max Timeout p

Index-4305753-A Rev 00remote tunnel end point, 2-15remote-endpoint command (BCC), 2-15Require In Security parameter (RIPSO), A-26Require Out Security

305753-A Rev 00Index-5tunneladding IP protocol, 2-11adding IPX protocol, 2-12definition, 1-2deleting a protocol, 2-14disabling a protocol, 2-13enablin

Configuring GRE, NAT, RIPSO, and BFE Servicesxviii305753-A Rev 00Related PublicationsFor more information about GRE, NAT, and other IP services, refer

Preface305753-A Rev 00xix You can now print Bay Networks technical manuals and release notes free, directly from the Internet. Go to support.baynetwor

ii305753-A Rev 00Bay Networks, Inc.4401 Great America ParkwaySanta Clara, CA 95054Copyright © 1999 Bay Networks, Inc.All rights reserved. Printed in t

305753-A Rev 001-1 Chapter 1IntroductionThe following topics introduce concepts and terminology used in this guide:Generic Routing Encapsulation (GRE)

Configuring GRE, NAT, RIPSO, and BFE Services1-2305753-A Rev 00A tunnel is a virtual point-to-point connection. It has as its end points the IP addres

Introduction305753-A Rev 001-3 Revised IP Security Option (RIPSO)IP routers support the Department of Defense (DoD) Revised IP Security Option (RIPSO)

Configuring GRE, NAT, RIPSO, and BFE Services1-4305753-A Rev 00Blacker Front End (BFE)The Blacker front end (BFE) is a classified encryption device us

305753-A Rev 002-1 Chapter 2Configuring GRE TunnelsThis chapter provides information about Generic Routing Encapsulation (GRE) tunnels and instruction

Configuring GRE, NAT, RIPSO, and BFE Services2-2305753-A Rev 00How GRE Tunneling WorksA simple point-to-point GRE tunnel terminates at router interfac

Configuring GRE Tunnels305753-A Rev 002-3 The GRE tunnel can use any IP interface configured on the router as a physical end point. To maximize the ro

Configuring GRE, NAT, RIPSO, and BFE Services2-4305753-A Rev 00Figure 2-2. GRE Tunnel Encapsulating the IP ProtocolRouter 2Router 1Router interfaceRou

Configuring GRE Tunnels305753-A Rev 002-5 Avoiding IP Tunnel MisconfigurationBefore configuring a tunnel encapsulating IP, you should be aware of a li

305753-A Rev 00iiiBay Networks, Inc. Software License AgreementNOTICE: Please carefully read this license agreement before copying or using the accom

Configuring GRE, NAT, RIPSO, and BFE Services2-6305753-A Rev 00The disadvantage of using an announce policy is that it prevents the advertisement of o

Configuring GRE Tunnels305753-A Rev 002-7 Creating a Generic Routing Encapsulation TunnelYou can create up to 64 GRE tunnels on one router; each GRE t

Configuring GRE, NAT, RIPSO, and BFE Services2-8305753-A Rev 00Using Site ManagerTo add a GRE tunnel, complete the following tasks:Site Manager Proced

Configuring GRE Tunnels305753-A Rev 002-9 Enabling or Disabling a GRE TunnelWhen you create a GRE tunnel, the tunnel is enabled by default. You can us

Configuring GRE, NAT, RIPSO, and BFE Services2-10305753-A Rev 00Deleting a GRE TunnelUse the BCC or Site Manager to delete a GRE tunnel from the route

Configuring GRE Tunnels305753-A Rev 002-11 Adding and Deleting Protocols for GRE TunnelsThe Bay Networks implementation of GRE tunneling supports IP a

Configuring GRE, NAT, RIPSO, and BFE Services2-12305753-A Rev 00Adding an IPX Protocol InterfaceTo add an IPX protocol interface to a GRE tunnel, navi

Configuring GRE Tunnels305753-A Rev 002-13 Enabling or Disabling a ProtocolYou can use the BCC or Site Manager to enable or disable a protocol on a GR

Configuring GRE, NAT, RIPSO, and BFE Services2-14305753-A Rev 00Deleting a Protocol from a GRE TunnelUse the BCC or Site Manager to delete a protocol

Configuring GRE Tunnels305753-A Rev 002-15 Configuring a Remote Tunnel End PointA remote tunnel end point can be any IP interface configured on a Bay

iv305753-A Rev 00its own data and information and for maintaining adequate procedures apart from the Software to reconstruct lost or altered files, d

Configuring GRE, NAT, RIPSO, and BFE Services2-16305753-A Rev 00For example, the following command sequence configures the remote end point austin wit

Configuring GRE Tunnels305753-A Rev 002-17 Configuring a Remote Logical IPX InterfaceTo configure a remote logical IPX interface, navigate to the remo

Configuring GRE, NAT, RIPSO, and BFE Services2-18305753-A Rev 00Enabling or Disabling a Remote Tunnel End PointUse the BCC or Site Manager to enable o

Configuring GRE Tunnels305753-A Rev 002-19 Using Site ManagerTo enable or disable a remote tunnel end point, complete the following tasks:Deleting a R

Configuring GRE, NAT, RIPSO, and BFE Services2-20305753-A Rev 00Using Site ManagerTo delete a remote tunnel end point, complete the following tasks:Si

305753-A Rev 003-1 Chapter 3Configuring Network Address TranslationThis chapter describes NAT and provides instructions for configuring NAT on a route

Configuring GRE, NAT, RIPSO, and BFE Services3-2305753-A Rev 00NAT Concepts and TerminologyNetwork Address Translation (NAT) offers a solution to two

Configuring Network Address Translation305753-A Rev 003-3 How NAT WorksIn the example that follows, company A uses NAT to obtain global Internet acces

Configuring GRE, NAT, RIPSO, and BFE Services3-4305753-A Rev 00In Figure 3-1, a packet from company A’s network with unregistered source address 10.0.

Configuring Network Address Translation305753-A Rev 003-5 When the router’s NAT interface receives a packet, the NAT router extracts the source addres

305753-A Rev 00vContents PrefaceBefore You Begin ...

Configuring GRE, NAT, RIPSO, and BFE Services3-6305753-A Rev 00In Figure 3-3, the NAT router dynamically translates the source address, 10.0.0.15, to

Configuring Network Address Translation305753-A Rev 003-7 In Figure 3-4, the NAT router then replaces the local source address (10.0.0.15) with the tr

Configuring GRE, NAT, RIPSO, and BFE Services3-8305753-A Rev 00The destination host uses the incoming packet’s source address to create a destination

Configuring Network Address Translation305753-A Rev 003-9 Static Address TranslationUsing static address translation, you can create a one-to-one tran

Configuring GRE, NAT, RIPSO, and BFE Services3-10305753-A Rev 00A router does not “own” a translation unless it receives traffic using that translatio

Configuring Network Address Translation305753-A Rev 003-11 Starting NAT ServicesYou can use the BCC or Site Manager to start NAT on the router. For in

Configuring GRE, NAT, RIPSO, and BFE Services3-12305753-A Rev 00To configure a local address range, navigate to the global NAT prompt (for example, bo

Configuring Network Address Translation305753-A Rev 003-13 Configuring a Global NAT InterfaceThe global interface is connected to the external interne

Configuring GRE, NAT, RIPSO, and BFE Services3-14305753-A Rev 00Using Site ManagerBefore you can start NAT on the router, you must configure a circuit

Configuring Network Address Translation305753-A Rev 003-15 Configuring the Global InterfaceThe global interface is connected to the external internetw

vi305753-A Rev 00Enabling or Disabling a Protocol ...2-13Deleting a Protocol

Configuring GRE, NAT, RIPSO, and BFE Services3-16305753-A Rev 00Configuring a Local and Global Address RangeThe local address range tells the router w

Configuring Network Address Translation305753-A Rev 003-17 Where to Go NextThe instructions provided in “Starting NAT Services” are the minimal instru

Configuring GRE, NAT, RIPSO, and BFE Services3-18305753-A Rev 00Starting NAT SynchronizationNAT synchronization allows up to 10 routers configured as

Configuring Network Address Translation305753-A Rev 003-19 Using the BCCTo start NAT synchronization on a router using default values for most paramet

Configuring GRE, NAT, RIPSO, and BFE Services3-20305753-A Rev 00Configuration ExampleThe following example shows the BCC commands that you enter to co

Configuring Network Address Translation305753-A Rev 003-21 Adding NAT Synchronization PeersTo add a router to the list of synchronized peer routers, c

Configuring GRE, NAT, RIPSO, and BFE Services3-22305753-A Rev 00Customizing NAT Global ParametersTo customize the way NAT operates on a router, modify

Configuring Network Address Translation305753-A Rev 003-23 Enabling and Disabling NAT on the RouterYou can use the BCC or Site Manager to enable or di

Configuring GRE, NAT, RIPSO, and BFE Services3-24305753-A Rev 00Configuring the Soloist Slot MaskBy default, the router uses any available slot for th

Configuring Network Address Translation305753-A Rev 003-25 Using Site ManagerTo specify the slots on which NAT can run as a soloist, complete the foll

305753-A Rev 00viiUsing Site Manager ...3-20Enabling NAT

Configuring GRE, NAT, RIPSO, and BFE Services3-26305753-A Rev 00Logging NAT MessagesBy default, the router does not log NAT messages. You can enable t

Configuring Network Address Translation305753-A Rev 003-27 Using Site ManagerTo specify the types of log messages that are reported by NAT software, c

Configuring GRE, NAT, RIPSO, and BFE Services3-28305753-A Rev 00Enabling and Disabling Translation Entry Timeout By default, the router deletes expire

Configuring Network Address Translation305753-A Rev 003-29 Configuring the Translation Entry Timeout ValueA dynamic translation entry (or mapping) has

Configuring GRE, NAT, RIPSO, and BFE Services3-30305753-A Rev 00Using Site ManagerTo configure the timeout period for a dynamic translation entry, com

Configuring Network Address Translation305753-A Rev 003-31 Customizing a NAT InterfaceThis section includes the following topics:Adding NAT to an IP I

Configuring GRE, NAT, RIPSO, and BFE Services3-32305753-A Rev 00Using Site ManagerTo add NAT to an IP interface, complete the following tasks:Site Man

Configuring Network Address Translation305753-A Rev 003-33 Enabling and Disabling NAT on an InterfaceWhen you add NAT to an IP interface, NAT is enabl

Configuring GRE, NAT, RIPSO, and BFE Services3-34305753-A Rev 00Using Site ManagerTo enable or disable NAT on an interface, complete the following tas

Configuring Network Address Translation305753-A Rev 003-35 Modifying the Interface TypeThe NAT router is configured with local and global interfaces.

viii305753-A Rev 00Enabling and Disabling NAT Synchronization Peers ...3-67Deleting NAT Synchronization Pe

Configuring GRE, NAT, RIPSO, and BFE Services3-36305753-A Rev 00Using Site ManagerTo modify the NAT interface type, complete the following tasks:Site

Configuring Network Address Translation305753-A Rev 003-37 Deleting NAT from an IP InterfaceUse the BCC or Site Manager to delete NAT from an IP inter

Configuring GRE, NAT, RIPSO, and BFE Services3-38305753-A Rev 00Configuring Static Address TranslationStatic address translation creates a one-to-one

Configuring Network Address Translation305753-A Rev 003-39 For example, the following command sequence maps the local address 10.1.1.1 to the global a

Configuring GRE, NAT, RIPSO, and BFE Services3-40305753-A Rev 00Enabling and Disabling a Static Address MappingWhen you add a static address mapping,

Configuring Network Address Translation305753-A Rev 003-41 Using Site ManagerTo enable or disable a static address mapping, complete the following tas

Configuring GRE, NAT, RIPSO, and BFE Services3-42305753-A Rev 00Using Site ManagerTo delete a static address mapping, complete the following tasks:Sit

Configuring Network Address Translation305753-A Rev 003-43 Configuring Dynamic Local Address RangesThe local address range is a group of unregistered

Configuring GRE, NAT, RIPSO, and BFE Services3-44305753-A Rev 00Using Site ManagerTo configure a local address range, complete the following tasks:Sit

Configuring Network Address Translation305753-A Rev 003-45 Enabling and Disabling a Local Address RangeWhen you add a local address range, it is enabl

305753-A Rev 00ixNAT Dynamic Translation Global Address Range Parameters ... A-19NAT Synchronization Peer Parameters ...

Configuring GRE, NAT, RIPSO, and BFE Services3-46305753-A Rev 00Using Site ManagerTo disable or reenable a local address range, complete the following

Configuring Network Address Translation305753-A Rev 003-47 Deleting a Local Address RangeYou can use the BCC or Site Manager to delete a dynamic local

Configuring GRE, NAT, RIPSO, and BFE Services3-48305753-A Rev 00Configuring Dynamic Global Address RangesThe global address range is a group of regist

Configuring Network Address Translation305753-A Rev 003-49 Using Site ManagerTo configure a global address range, complete the following tasks:Site Ma

Configuring GRE, NAT, RIPSO, and BFE Services3-50305753-A Rev 00Enabling and Disabling a Global Address RangeWhen you create a global address range, i

Configuring Network Address Translation305753-A Rev 003-51 Using Site ManagerTo disable or reenable a global address range, complete the following tas

Configuring GRE, NAT, RIPSO, and BFE Services3-52305753-A Rev 00Deleting a Global Address RangeUse the BCC or Site Manager to delete a dynamic global

Configuring Network Address Translation305753-A Rev 003-53 Configuring Network Address Port (N-to-1) TranslationUsing network address port (N-to-1) tr

Configuring GRE, NAT, RIPSO, and BFE Services3-54305753-A Rev 00The following events occur:1. NAT receives a packet from host A on the local interface

Configuring Network Address Translation305753-A Rev 003-55 Figure 3-7. N-to-1 Translation (Global to Local)3. Subsequently, NAT receives a packet on t