nat – a family of commands for configuring NAT/NAPT translation rules

nat enable (true|false)

Enable or disable NAT. Disabled by default.

nat rule <name>

Create rule with name <name> and go to rule configuration submenu.

rule=['name']> enable (true|false)

Enable or disable rule.

rule=['name']> type (StaticSourceNat|DynamicSourceNapt|DynamicSourceNat|StaticDestinationNapt)

Set translation type for rule.

rule=['name']> move <other-name>

Move this rule in the list to the position above rule <other-name>.

rule=['name']> [no] original

Go to the configuration submenu for the left side of the translation rule (what is being translated) (or delete if no).

rule=['name']> original > src <object-name>

Add network object to the left side of the translation rule in the 'source' field.

rule=['name']> original > src <subnet>

Add subnet to the left side of the translation rule in the 'source' field.

rule=['name']> original > src <IP-range>

Add IP address range to the left side of the translation rule in the 'source' field.

rule=['name']> original > src <host>

Add IP address to the left side of the translation rule in the 'source' field.

rule=['name']> original > no src

Remove 'source' field from the left side of the translation rule

rule=['name']> original > dst <object-name>

Add network object to the left side of the translation rule in the 'destination' field.

rule=['name']> original > dst <subnet>

Add subnet to the left side of the translation rule in the 'destination' field.

rule=['name']> original > dst <IP-range>

Add IP address range to the left side of the translation rule in the 'destination' field.

rule=['name']> original > dst <host>

Add IP address to the left side of the translation rule in the 'destination' field.

rule=['name']> original > no dst

Remove 'destination' field from the left side of the translation rule

rule=['name']> original > service <service-name>

Add service to the left side of the translation rule in the 'service' field (sets transport protocol and port).

rule=['name']> original > no service

Remove 'service' field from the left side of the translation rule

rule=['name']> [no] translated

Go to the configuration submenu for the right side of the translation rule (what is being translated to) (or delete if no).

rule=['name']> translated > src <object-name>

Add network object to the right side of the translation rule in the 'source' field.

rule=['name']> translated > src <subnet>

Add subnet to the right side of the translation rule in the 'source' field.

rule=['name']> translated > src <IP-range>

Add IP address range to the right side of the translation rule in the 'source' field.

rule=['name']> translated > src <host>

Add IP address to the right side of the translation rule in the 'source' field.

rule=['name']> translated > no src

Remove 'source' field from the right side of the translation rule

rule=['name']> translated > dst <object-name>

Add network object to the right side of the translation rule in the 'destination' field.

rule=['name']> translated > dst <subnet>

Add subnet to the right side of the translation rule in the 'destination' field.

rule=['name']> translated > dst <IP-range>

Add IP address range to the right side of the translation rule in the 'destination' field.

rule=['name']> translated > dst <host>

Add IP address to the right side of the translation rule in the 'destination' field.

rule=['name']> translated > no dst

Remove 'destination' field from the right side of the translation rule

rule=['name']> translated > src-ports (<port>|<port-range>)

Add source port or range of ports to translate to on the right side of the translation rule.

rule=['name']> translated > no src-ports

Remove source port or range of ports to translate to from the right side of the translation rule.

rule=['name']> translated > dst-ports (<port>|<port-range>)

Add destination port or range of ports to translate to on the right side of the translation rule.

rule=['name']> translated > no dst-ports

Remove destination port or range of ports to translate to from the right side of the translation rule.

show nat rules

Show information about all NAT/NAPT translation rules.

show nat rule <name>

Show information about NAT/NAPT translation rule with name <name>.

no nat rule <name>

Remove NAT/NAPT translation rule with name <name>.

| Prev | Home | Next |