iMC NTAUBA 典型配置举例-5PW105-整本手册(2).pdf

基于NAT日志创建审计任务配置举例

产品版本：iMCUBA7.3(E0503)

Copyright©2014-2017新华三技术有限公司版权所有，保留一切权利。

非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，

并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。

目录

1介绍······················································································································································1

2特性使用指南········································································································································1

2.1使用场合···············································································································································1

2.2配置前提···············································································································································1

3配置举例···············································································································································1

3.1组网需求···············································································································································1

3.2配置步骤···············································································································································2

3.3验证结果·············································································································································10

i

1介绍

NAT（NetworkAddressTranslation，网络地址转换）主要用于将大量的私网地址映射到少量几个

公网地址，实现访问Internet的功能。

但是，由于内网用户通过NAT设备访问外部网络时，多个用户共用一个公网地址，从而屏蔽了内网

信息，增加了用户上网行为审计的难度。

利用NAT日志与iMCUBA组件配合，可以实时跟踪、记录内网用户访问外网的情况，便于网络管

理员对用户上网行为的审计。NAT日志是NAT设备在进行NAT转换时生成的，主要记录了报文的

源IP地址、源端口、目的IP地址、目的端口、转换后的源IP地址、转换后的源端口以及用户执行