With the rapid development of the network, more and more enterprises begin to use the network as a platform for enterprise management and sales. At this time, network security is highlighted, next we will introduce the NAT settings of the vro. I. NAT type (1) Dynamic NAT the so-called dynamic NAT, that is, the NAT address is not fixed and is dynamically allocated from an IP pool. (2) Static NAT static NAT is the easiest to set. Each host in the internal network is permanently mapped to a valid address in the external network. (3) the addresses used in the overlapping conversion Intranet overlap with the external network. In this case, you need to change the IP addresses that overlap with the external network, this type of conversion is generally applied when the private network addresses at both ends of the conversion are the same. (4) reusing and converting PAT is the most widely used NAT application. In dynamic conversion, each valid IP Address can only be used once in the conversion table, when the external access demand for internal network hosts increases, the IP addresses in the valid address list will soon be insufficient. In this case, you can use the upper-layer protocol id, for example, you can use the port number field of the transport layer TCP/UDP to create a NAT translation table.
Ii. Server Load balancer DNS's Server Load balancer technology mainly uses the round robin algorithm. However, the DNS load technology is hard to solve, that is, the client will locally buffer DNSIP address resolution, so that subsequent applications will reach the same IP address. This is an acceleration technology, but it actually weakens the role of DNS load balancing technology. NAT Server Load balancer solves this problem. routers or other NAT devices translate multiple IP addresses that require load balancing into one public IP address. Router NAT Load Balancing configuration (1) defines NAT on the router interface. InterfaceEthernet0/0; ipaddress2.2.2.10255.%%240; ipnatinside; www.2cto.com interfaceSerial0/0; ipaddress219.142.5.5255.%%%248; ipnatoutside. (2) define a standard access list (standardaccesslist), used to identify the legitimate IP address to be converted; ipaccess-list1permit219.142.5.5. (3) define a NAT address pool to identify the IP address of the internal WEB server. The following parameter uses rotary to indicate that we need to use RoundRobin) to convert valid IP packets. ipnatpoolwebsvr2.2.2.12.2.2.3netmask?#248typerotary. (4) convert the destination address as the IP packet in the Access Table to the IP address defined in the address pool; ipnatinsidedestinationlist1poolwebsvr. Follow the preceding steps to configure the NAT Server Load balancer. You must know how to configure the NAT Server Load balancer. This article is from