Service Nat Source Rule <Rule-Number> Source <Address - Brocade Communications Systems 5600 Reference Manual

service nat source rule <rule-number> source <address>
service nat source rule <rule-number> source <address>
Specifies a source address and port to match in a NAT source rule.
Syntax
set service nat source rule rule-number source { address address | port port }
delete service nat source rule rule-number source [ address | port ]
show service nat source rule rule-number source [ address | port ]
Parameters rule-number
address
port
Modes
Configuration mode
Configuration
service {
Statement
}
Usage Guidelines Use care when employing more than one exclusion rule (using the ! symbol), that is, when combining
more than one negation operator. NAT rules are evaluated sequentially, and a sequence of exclusion
rules could result in unexpected behavior.
Use the set form of this command to specify a source address and port to match in a NAT source rule
(source filter).
Use the delete form of this command to remove a source filter.
Use the show form of this command to view a source filter.
68
The numeric identifier of a rule. The identifier ranges from 1 through 9999.
A source address to match. Address formats are as follows:
ip-address: An IP address.
ip-address/prefix: A network address, where 0.0.0.0/0 matches any network.
!ip-address: All IP addresses except the one specified.
!ip-address/prefix: All network addresses except the one specified.
A source port to match. A port is valid only for TCP and UDP protocols. Port
formats are as follows:
port-name: The name of an IP service; for example, http. You can specify any
service name in the etc/services file.
port-number: A port number. The number ranges from 1 through 65535.
start-end: A range of ports; for example, 1001-1005.
nat {
source {
rule rule-number {
source {
address address
port port
}
}
}
}
Brocade 5600 vRouter NAT Reference Guide
53-1003718-03