Extreme Networks ExtremeWare 7.5, Command Reference Manual

Page: 473 / 2546

configure nat add vlan map
ExtremeWare 7.5 Command Reference Guide 473
configure nat add vlan map
configure nat add vlan <vlan name> map source [any |
<source_ipaddress>/<mask>]
{l4-port [any | <port> {- <port>}]}
{destination [any | <dest_ipaddress>/<mask>] {l4-port [any | <port>
{- <port>}]}} to <nat_ip address> [/<mask> | - <ip address>]
{[tcp | udp | both] [portmap {<min> - <max>} | auto-constrain]}
Description
Adds a NAT translation rule that translates private IP addresses to public IP addresses on the outside
VLAN.
Syntax Description
Default
N/A
vlan name Specifies the name of the outside VLAN to which this rule applies.
source_ipaddress/mask Specifies a subnet IP address (in the format x.x.x.x/mask where mask is the number
of bits in the subnet mask) that defines the source of the traffic to be mapped.
l4-port Specifies a layer 4 port or port range. When used with a source IP address, indicates
that the rule applies only to traffic from the specified layer 4 port(s).
When used with a destination IP address, indicates that the rule applies only to
packets with the specified layer 4 port(s) as their destination.
port Specifies a port number in the range 1 to 65535.
any
indicates that the rule should be applied to traffic to/from any layer 4 port.
dest_ipaddress/mask Specifies a subnet IP address (in the format x.x.x.x/mask where mask is the number
of bits in the subnet mask) used to determine the packets to which this rule applies.
nat_ipaddress Specifies an IP address for the outside VLAN to which the source IP addresses will be
mapped. This can be specified as a subnet (IP address and mask) or as an address
range.
tcp Specifies only TCP traffic should be translated.
udp Specifies only UDP traffic should be translated.
both Specifies that both TCP and UDP traffic should be translated.
portmap Specifies that port-mapping mode should be used.
min Specifies a port number in the range 1 to 65535.The default setting is 1024.
max Specifies a port number in the range 1 to 65535. The default setting is 65535.
auto-constrain Specifies that each inside IP address should be restricted in the number of
simultaneous connections.