Table of Contents
Advertisement
Command Reference Guide
nat source list
Use the nat source list command to translate the source Internet Protocol version 4 (IPv4) address to a
specified IPv4 address (or to the primary IPv4 address of the specified interface) and create an association
in the firewall. The translation is applied only to those packets permitted by the specified IPv4 access
control list (ACL), and entering the interface to which the IPv4 access control policy (ACP) is assigned.
This function is commonly referred to as a "many-to-one NAT". All firewall associations are subject to the
built-in firewall timers (refer to
nat source list <ipv4 acl name> address <ipv4 address> overload
nat source list <ipv4 acl name> address <ipv4 address> overload no-alg
nat source list <ipv4 acl name> address <ipv4 address> overload no-alg policy <ipv4 acp name>
nat source list <ipv4 acl name> address <ipv4 address> overload policy <ipv4 acp name>
nat source list <ipv4 acl name> address vrf <ipv4 address> <vrf name> overload
nat source list <ipv4 acl name> address vrf <ipv4 address> <vrf name> overload no-alg
nat source list <ipv4 acl name> address vrf <ipv4 address> <vrf name> overload no-alg policy <ipv4
acp name>
nat source list <ipv4 acl name> address vrf <ipv4 address> <vrf name> overload policy <ipv4 acp
name>
nat source list <ipv4 acl name> interface <interface> overload
nat source list <ipv4 acl name> interface <interface> overload no-alg
nat source list <ipv4 acl name> interface <interface> overload no-alg policy <ipv4 acp name>
nat source list <ipv4 acl name> interface <interface> overload policy <ipv4 acp name>
Syntax Description
<ipv4 acl name>
address <ipv4 address>
address vrf <ipv4 address> <vrf name>Specifies the VPN routing and forwarding (VRF) instance
interface <interface>
60000CRG0-35E
ip policy-timeout on page
Specifies the IPv4 ACL against which to check traffic before
allowing packets to enter the interface. All packets not matched by
the IPv4 ACL will be processed by the next IPv4 ACP entry or
implicitly discarded if no further IPv4 ACP entries exist.
Specifies the IPv4 address from which the translated packets will
be sourced. IPv4 addresses should be expressed in dotted
decimal notation (for example, 10.10.10.1).
corresponding to the specified post-NAT source address.
Specifies the interface from which the translated packets will be
sourced. The primary IPv4 address of an interface is used as the
source IPv4 address for translated packets. Specify an interface in
the format <interface type [slot/port | slot/port.subinterface id |
interface id | interface id.subinterface id]>. For example, for an
Ethernet subinterface, use eth 0/1.1; for a PPP interface, use ppp
1; and for an ATM subinterface, use atm 1.1. Type nat source list
<ipv4 acl name> interface ? for a list of valid interfaces.
Copyright © 2012 ADTRAN, Inc.
IPv4 Access Control Policy Command Set
1063). Variations of this command include:
3157
Advertisement
Table of Contents
