Chapter 5
50
<port> is the destination UDP or TCP port number to match in
the incoming traffic.
<proto> is the IP protocol, either udp or tcp.
<new IP> is the new IP address on the private network which
the packet’s destination IP address should be translated to.
If a rule is added for an interface on which NAT is not enabled,
the rule is added, but a warning is printed to alert the user.
quiet is a special option which should not normally be issued at
the console, and causes this warning to be suppressed. The quiet
option is automatically added by NAT to when writing its
configuration to flash; this is because when a system boots, the
NAT process reads in these rules before IP has registered any
interfaces.
nat inbound list shows the current rules for inbound traffic,
including all the arguments to the nat inbound add command.
nat inbound delete removes a rule, where <#> is the rule
number as shown by the nat inbound list command.
nat inbound flush removes all the rules.
Example:
adsl> nat inbound add ethernet 80/TCP 192.168.219.38
adsl> nat inbound list
# InterfacePort/IP ProtocolNew IP address
1 ethernet80/tcp192.168.219.38
2 rfc148321/tcp192.168.219.40
adsl> nat inbound delete 2
5.4.4.5
protocol
Syntax:
nat protocols
Description:
Lists the Application Level Gateways (ALGs) provided in the
current image in order to support particular higher-level
protocols, and the port or ports which each ALG monitors.
