华三防火墙NAT全局策略方式配置（命令行）

• • NAT地址转换

#进入1/0/3接口配置NAT动态地址转换。

[H3C]interface GigabitEthernet 1/0/3

[H3C-GigabitEthernet1/0/3]**nat outbound **在出接口下启用nat outbound

[H3C-GigabitEthernet1/0/3]quit

#配置NAT全局策略，实现从trust安全域到untrust安全域的源地址转换，转换方式为easy-ip。

[H3C]nat global-policy

[H3C-nat-global-policy]rule name easy_ip

[H3C-nat-global-policy-rule-easy_ip]source-zone Trust

[H3C-nat-global-policy-rule-easy_ip]destination-zone Untrust

[H3C-nat-global-policy-rule-easy_ip]action snat easy-ip

[H3C-nat-global-policy-rule-easy_ip]quit

[H3C-nat-global-policy]quit