Extreme Networks ExtremeWare 7.7, Справочник по командам

Страница: 477 / 2620

configure nat add vlan map
ExtremeWare 7.7 Command Reference Guide 477
Using Layer 4 Port Numbers. The addition of the
l4-port
optional keyword allows the NAT rule to
be applied to only packets with a specific layer 4 source or destination port. If you use the layer 4-port
command after the source IP/mask, the rule matches only if the port(s) specified are the source layer
4-ports. If you use the
l4-port
command after the destination IP/mask, the rule matches only if the
port(s) specified are the destination layer 4 ports. Both options can be used together to further limit the
rule. If you specify layer 4 ports, ICMP traffic will not be translated and allowed to pass.
Rule Processing. Rules are processed in order, usually in the order in which they were added. When
a single rule is matched, no other rules are processed. You can view the rule order using the
show nat
rules
command.
Examples
Static Mapping. The following command defines a static translation rule that specifies that traffic
coming from 192.168.1.12 will be mapped to 216.52.8.32 on the outside VLAN called out_vlan_1:
configure nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32
Using /32 as the netmask for both the
source
and
to
netmasks specifies static translation.
Dynamic Mapping. The following command defines a dynamic translation rule that specifies that
traffic coming from subnet 192.168.1.0 will be mapped to IP addresses in the range of 216.52.8.1 to
216.52.8.31 on outside VLAN
out_vlan_1
:
configure nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31
Port Mapping. The following command defines a translation rule that specifies that TCP/UDP packets
coming from 192.168.1.12 and destined for 192.168.5.20 will be mapped to 216.52.8.32 on outside VLAN
out_vlan_1
:
configure nat add out_vlan_1 map source 192.168.1.12/32 destination 192.168.5.20 to
216.52.8.32/32
The following command defines a portmap translation rule that specifies that both TCP and UDP traffic
from subnet 102.168.2.0/25 will be mapped to available layer 4 ports on the IP addresses in the subnet
216.52.8.32/28:
configure nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.8.32 /28 both portmap
The following command defines a portmap translation rule that specifies that only TCP traffic from
subnet 102.168.2.0/25 be mapped to layer 4 ports in the range of 1024-8192 on the IP addresses in the
subnet 216.52.8.64/28:
configure nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap
1024 - 8192
Auto-constraining. The following command specifies an auto-constrain NAT translation rule that
applies to both TCP and UDP traffic:
configure nat add out_vlan_3 map source 192.168.3.0/24 to 216.52.8.64/32 both
auto-constrain
History
This command was first available in ExtremeWare 6.2.
This command was added to the Summit “ e ” series of switches in ExtremeWare 7.1e.