Name | Status | IP address |
Ethernet | enabled | 194.129.40.2 |
pppnot | ready | – |
7.4inbound
7.4.1Syntax
nat inbound list
nat inbound add <i/f> <port>/<proto> <new IP> [quiet] nat inbound delete <#>
nat inbound flush
7.4.2 Description
This command enables the user to list or to set up a series of rules, to determine what happens to incoming traffic. By default all incoming packets, other that packets arriving in response to outgoing traffic, will be rejected.
The nat inbound add command allows packets arriving on a specific port and IP protocol to be forwarded to a machine on the private network.
•<i/f> is an interface name as shown by the nat interface list command;
•<port> is the destination UDP or TCP port number to match in the incoming traffic;
•<proto> is the IP protocol, either udp or tcp;
•<new IP> is the new IP address on the private network which the packet’s destination IP address should be translated to.
If a rule is added for an interface on which NAT is not enabled, the rule is added anyway but a warning is printed to alert the user to this fact. quiet is a special option which should not normally be issued at the console, and causes this warning to be suppressed. The quiet option is automatically added by NAT to when writing its configuration to flash; this is because when a system boots, the NAT process reads in these rules before IP has registered any interfaces.
nat inbound list shows the current rules for inbound traffic, including all the arguments passed to the nat inbound add command.
nat inbound delete removes a rule, where <#> is the rule number as shown by the nat inbound list command.
nat inbound flush removes all the rules.
7.4.3 Example
bd3000> nat inbound add ethernet 80/TCP 192.168.219.38
bd3000> nat inbound list
# Interface Port/Proto New IP address
1 ethernet | 80/tcp | 192.168.219.38 |
