Extreme Networks ExtremeWare Command Reference Manual page 423

Hide thumbs Also See for ExtremeWare:

Table of Contents

configure nat add vlan map

IP/mask, the rule will only match if the port(s) specified are the source layer 4-ports. If you use the

command after the destination IP/mask, the rule will only match if the port(s) specified are the

destination layer 4 ports. Both options may be used together to further limit the rule. If you specify

layer 4 ports, ICMP traffic will not translated and allowed to pass.

Rules are processed in order, usually in the order in which they were added. When a single rule is

matched, no other rules are processed. You can view the rule order using the

show nat rules

The following command defines a static translation rule that specifies that traffic coming from

192.168.1.12 be mapped to 216.52.8.32 on outside VLAN

configure nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32

The following command defines a dynamic translation rule that specifies that traffic coming from

subnet 192.168.1.0 should be mapped to IP addresses in the range of 216.52.8.1 to 216.52.8.31 on outside

configure nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31

The following command defines a translation rule that specifies that TCP/UDP packets coming from

192.168.1.12 and destined for 192.168.5.20 be mapped to 216.52.8.32 on outside VLAN

configure nat add out_vlan_1 map source 192.168.1.12/32 destination 192.168.5.20 to

216.52.8.32/32

The following command defines a portmap translation rule that specifies that both TCP and UDP traffic

from subnet 102.168.2.0/25 be mapped to available layer 4 ports on the IP addresses in the subnet

216.52.8.32/28:

configure nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.8.32 /28 both portmap

The following command defines a portmap translation rule that specifies that only TCP traffic from

subnet 102.168.2.0/25 be mapped to layer 4 ports in the range of 1024-8192 on the IP addresses in the

subnet 216.52.8.32/28:

configure nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap

The following command specifies an autoconstrain NAT translation rule that applies to both TCP and

UDP traffic:

configure nat add out_vlan_3 map source 192.168.3.0/24 to 216.52.8.64/32 both

auto-constrain

This command was first available in ExtremeWare 6.2.

Platform Availability

This command is available on all platforms.

ExtremeWare Software 7.3.0 Command Reference Guide

Extremeware 7.3.0