Extreme Networks ExtremeWare Command Reference Manual page 329

config nat add vlan map
The addition of the optional keyword allows the NAT rule to be applied to only packets with a
l4-port
specific layer 4 source or destination port. If you use the layer 4-port command after the source
IP/mask, the rule will only match if the port(s) specified are the source layer 4-ports. If you use the
command after the destination IP/mask, the rule will only match if the port(s) specified are the
l4-port
destination layer 4 ports. Both options may be used together to further limit the rule. If you specify
layer 4 ports, ICMP traffic will not translated and allowed to pass.
Rules are processed in order, usually in the order in which they were added. When a single rule is
matched, no other rules are processed. You can view the rule order using the
show nat rules
command.
Example
The following command defines a static translation rule that specifies that traffic coming from
192.168.1.12 be mapped to 216.52.8.32 on outside VLAN :
out_vlan_1
config nat add out_vlan_1 map source 192.168.1.12/32 to 216.52.8.32/32
The following command defines a dynamic translation rule that specifies that traffic coming from
subnet 192.168.1.0 should be mapped to IP addresses in the range of 216.52.8.1 to 216.52.8.31 on outside
VLAN :
out_vlan_1
config nat add out_vlan_1 map source 192.168.1.0/24 to 216.52.8.1 - 216.52.8.31
The following command defines a translation rule that specifies that TCP/UDP packets coming from
192.168.1.12 and destined for 192.168.5.20 be mapped to 216.52.8.32 on outside VLAN :
out_vlan_1
config nat add out_vlan_1 map source 192.168.1.12/32 destination 192.168.5.20 to
216.52.8.32/32
The following command defines a portmap translation rule that specifies that both TCP and UDP traffic
from subnet 102.168.2.0/25 be mapped to available layer 4 ports on the IP addresses in the subnet
216.52.8.32/28:
config nat add out_vlan_2 map source 192.168.2.0/25 to 216.52.8.32 /28 both portmap
The following command defines a portmap translation rule that specifies that only TCP traffic from
subnet 102.168.2.0/25 be mapped to layer 4 ports in the range of 1024-8192 on the IP addresses in the
subnet 216.52.8.32/28:
config nat add out_vlan_2 map source 192.168.2.128/25 to 216.52.8.64/28 tcp portmap
1024 - 8192
The following command specifies an autoconstrain NAT translation rule that applies to both TCP and
UDP traffic:
config nat add out_vlan_3 map source 192.168.3.0/24 to 216.52.8.64/32 both
auto-constrain
History
This command was first available in ExtremeWare 6.2.
Platform Availability
This command is available on the "i" series platforms.
ExtremeWare Software 7.0.0 Command Reference Guide 329