HP 1032 ClusterPack V2.4 Tutorial - Page 44

Setup the NAT rules

Get HP 1032 PDF manuals and user guides View all HP 1032 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 44 highlights

% man 8 ipf z List the input output filter rules % ipfstat -hio Setup the NAT rules In this section, we will walk through the steps of setting up HP-UX IPFilter that translate the source IP addresses of all packets from the compute private subnet to the IP address of the gateway node. For addin more sophisticated NAT rules, please refer to the IPFilter documentation. 1. Create a file with NAT rules. Example 1: Map packets from all Compute Nodes in the 192.168.0.x subnet to a single IP address 15.99.84.23 % cat /tmp/nat.rules # lan0 -- interface to the external network # NAT IP interface: 15.99.84.23 map lan0 192.168.0.0/24 -> 15.99.84.23/32 portmap tcp/udp 40000:60000 map lan0 192.168.0.0/24 -> 15.99.84.23/32 EOF % cat /tmp/nat.rules # lan0 -- interface to the external network # NAT IP interface: 15.99.84.23 map lan0 192.168.0.0/24 -> 15.99.84.23/32 portmap tcp/udp 40000:60000 map lan0 192.168.0.0/24 -> 15.99.84.23/32 Example 2: Map packets from specific Compute Nodes (192.168.0.3 and 192.168.0.4) to a single IP address 15.99.84.23 % cat /tmp/nat.rules # lan0 -- interface to the external network # NAT IP interface: 15.99.84.23 map lan0 192.168.0.3/32 -> 15.99.84.23/32 portmap tcp/udp 40000:60000 map lan0 192.168.0.3/32 -> 15.99.84.23/32 map lan0 192.168.0.4/32 -> 15.99.84.23/32 portmap tcp/udp 40000:60000 map lan0 192.168.0.4/32 -> 15.99.84.23/32 EOF % cat /tmp/nat.rules # lan0 -- interface to the external network # NAT IP interface: 15.99.84.23 map lan0 192.168.0.3/32 -> 15.99.84.23/32 portmap tcp/udp 40000:60000 map lan0 192.168.0.3/32 -> 15.99.84.23/32

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
%
man 8 ipf
List the input output filter rules
%
ipfstat -hio
Setup the NAT rules
In this section, we will walk through the steps of setting up HP-UX IPFilter that translate the source IP
addresses of all packets from the compute private subnet to the IP address of the gateway node. For addin
more sophisticated NAT rules, please refer to the IPFilter documentation.
1.
Create a file with NAT rules.
Example 1: Map packets from all Compute Nodes in the 192.168.0.x subnet to a single IP
address 15.99.84.23
%
cat << EOF > /tmp/nat.rules
# lan0 -- interface to the external network
# NAT IP interface: 15.99.84.23
map lan0 192.168.0.0/24 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.0/24 -> 15.99.84.23/32
EOF
%
cat /tmp/nat.rules
# lan0 -- interface to the external network
# NAT IP interface: 15.99.84.23
map lan0 192.168.0.0/24 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.0/24 -> 15.99.84.23/32
Example 2: Map packets from specific Compute Nodes (192.168.0.3 and 192.168.0.4) to
a single IP address 15.99.84.23
%
cat << EOF > /tmp/nat.rules
# lan0 -- interface to the external network
# NAT IP interface: 15.99.84.23
map lan0 192.168.0.3/32 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.3/32 -> 15.99.84.23/32
map lan0 192.168.0.4/32 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.4/32 -> 15.99.84.23/32
EOF
%
cat /tmp/nat.rules
# lan0 -- interface to the external network
# NAT IP interface: 15.99.84.23
map lan0 192.168.0.3/32 -> 15.99.84.23/32 portmap tcp/udp
40000:60000
map lan0 192.168.0.3/32 -> 15.99.84.23/32