C613-50186-01 Rev B
Command Reference for AR2050V
2661
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
NAT C
OMMANDS
RULE
(NAT)
<
source-entity
>
Source entity name. An entity represents a
logical grouping of subnets, hosts or
interfaces, created by the
zone
,
network
(Entity)
, or
host (Entity)
commands.
In a
masq
rule, the source entity defines the
private side of the router. You assign private IP
addresses (RFC 1918) to hosts on the private
side of the router. When those hosts send
traffic, the router translates the private
addresses to one or more publicly valid
addresses before routing the traffic. When the
router receives traffic that is destined for those
hosts, it translates the public addresses back
to the appropriate private addresses.
In a
portfw
rule, the source entity may be an
entity outside your private network.
<destination-entity>
The destination entity name.
The destination entity defines the pool of
public-valid IP addresses. It can be a zone
(created by the
zone
command), network
(
network (Entity)
command) or host (
host
(Entity)
command).
<
source-host-entity
>
In a
masq
rule, the specific source host
address that the traffic will masquerade as.The
source -host-entity must be a host with one IP
address, created by using the
host (Entity)
command.
<
destination-host-entity
>
In a
portfw
rule, the target entity name of the
specific destination host that the traffic will be
port-forwarded to. The target entity must be a
host with one IP address, created by using the
host (Entity)
command.
dport <1-65535>
In a
portfw
rule, modify the destination port
to the specified port. (Only for protocols that
have ports.)
<
source-subnet-entity
>
The source entity that the netmap rule will
apply to, for instance a network created by the
network (Entity)
command. When the
with
src
parameter is used, this
source-subnet-entity is translated to the
<translated-subnet-entity> specified.
<
destination-subnet-entity
>
The destination entity that the
netmap
rule
applies to, for instance a network created by
the
network (Entity)
command. When the
with dst
parameter is used, this destination
subnet is translated to the
<translated-subnet-entity> specified.
Parameter
Description