ADTRAN AOS Version R10.1.0 Command Reference Manual page 3153

Command Reference Guide
nat destination list
Use the nat destination list command to translate the destination Internet Protocol version 4 (IPv4)
address to a specified IPv4 address, and creates a firewall association in the firewall. The translation is
applied only to those packets permitted by the specified IPv4 access control list (ACL) and entering the
interface to which the IPv4 access control policy (ACP) is assigned. All firewall associations are subject to
the built-in firewall timers (refer to
nat destination list <ipv4 acl name> address <ipv4 address> no-alg
nat destination list <ipv4 acl name> address <ipv4 address> port <port number>
nat destination list <ipv4 acl name> address <ipv4 address> port <port number> no-alg
nat destination list <ipv4 acl name> address vrf <ipv4 address> <vrf name>
nat destination list <ipv4 acl name> address vrf <ipv4 address> <vrf name> no-alg
nat destination list <ipv4 acl name> address vrf <ipv4 address> <vrf name> port <port number>
nat destination list <ipv4 acl name> address vrf <ipv4 address> <vrf name> port <port number> no-alg
Syntax Description
<ipv4 acl name>
address <ipv4 address>
address vrf <ipv4 address> <vrf name>
no-alg
port <port number>
Default Values
By default, all AOS security features are disabled and there are no configured IPv4 ACP entries.
Command History
Release 2.1
Release 16.1
Release 17.1
Release A4.01
60000CRG0-35E
ip policy-timeout on page
Specifies the IPv4 ACL against which to check traffic before
allowing packets to enter the interface. All packets not matched
by the IPv4 ACL will be processed by the next IPv4 ACP entry
or implicitly discarded if no further IPv4 ACP entries exist.
Specifies the address of the private IPv4 host to which the
translated packets are destined. IPv4 addresses should be
expressed in dotted decimal notation (for example, 10.10.10.1).
Specifies the VPN routing and forwarding (VRF) instance
corresponding to the specified post-NAT destination address.
Optional. Allows packets matching the IPv4 ACP entry to
traverse the firewall without being processed by the
application-level gateways (ALGs). This parameter, along with
the appropriate IPv4 ACL, prevents specific destinations from
being processed by the ALGs.
Optional. Translates the original destination port to a
user-specified port.
Command was introduced.
Command was expanded to include the no-alg parameter.
Command was expanded to include the vrf parameter.
Syntax for the address vrf parameter was altered.
Copyright © 2012 ADTRAN, Inc.
IPv4 Access Control Policy Command Set
1063). Variations of this command include:
3153