nat
interface/bridge/nat
Type: Directory
| Argument | Type | Description |
|---|---|---|
| all | switch | |
| static | switch | |
| dynamic | switch | |
| chain ( mandatory ) | enum | |
| action | enum (accept | passthrough | drop | jump | return | log | mark-packet | set-priority | src-nat | dst-nat | redirect | arp-reply) { accept:0, passthrough:1, drop:2, jump:3, return:4, log:5, mark-packet:6, set-priority:11, src-nat:7, dst-nat:8, redirect:9, arp-reply:10 } | |
| jump-target | enum () | |
| new-packet-mark | enum () | |
| to-src-mac-address | macAddr | |
| to-dst-mac-address | macAddr | |
| to-arp-reply-mac-address | macAddr | |
| new-priority | num | |
| passthrough | bool | |
| in-interface | super { ! , interface: iface_enum } | |
| in-bridge | super { ! , interface: iface_enum } | |
| out-interface | super { ! , interface: iface_enum } | |
| out-bridge | super { ! , interface: iface_enum } | |
| in-interface-list | super { ! , interface-list: enum } | |
| out-interface-list | super { ! , interface-list: enum } | |
| in-bridge-list | super { ! , interface-list: enum } | |
| out-bridge-list | super { ! , interface-list: enum } | |
| src-mac-address | super { ! , address: macAddr , [mask] /macAddr } | |
| dst-mac-address | super { ! , address: macAddr , [mask] /macAddr } | |
| mac-protocol | super { ! , protocol: alt { protocol-name: enum (length) { length:1 } , protocol-number: num [ .. 65535] } } | |
| src-address | super { ! , address: ipAddr , [netmask] /num [ .. 32] } | |
| dst-address | super { ! , address: ipAddr , [netmask] /num [ .. 32] } | |
| src-address6 | super { ! , address: ip6Prefix } | |
| dst-address6 | super { ! , address: ip6Prefix } | |
| src-port | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| dst-port | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| ip-protocol | super { ! , protocol: enum () } | |
| packet-mark | super { ! , mark: enum } | |
| packet-type | super { ! , type: enum (host | broadcast | multicast | other-host) { host:0, broadcast:1, multicast:2, other-host:3 } } | |
| limit | super { count: num , [time] [ /time] , [burst] ,num } | |
| 802.3-sap | super { ! , sap: num [ .. 0xff] } | |
| 802.3-type | super { ! , type: num [ .. 0xffff] } | |
| arp-opcode | super { ! , opcode: alt { common-opcode: enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 } , opcode-number: num [ .. 65535] } } | |
| arp-hardware-type | super { ! , type: num [ .. 0xffff] } | |
| arp-packet-type | super { ! , type: num [ .. 0xffff] } | |
| arp-src-address | super { ! , address: ipAddr , [netmask] /num [ .. 32] } | |
| arp-dst-address | super { ! , address: ipAddr , [netmask] /num [ .. 32] } | |
| arp-src-mac-address | super { ! , address: macAddr , [mask] /macAddr } | |
| arp-dst-mac-address | super { ! , address: macAddr , [mask] /macAddr } | |
| arp-gratuitous | super { gratuitous: bool } | |
| vlan-id | super { ! , type: num [ .. 4095] } | |
| vlan-priority | super { ! , type: num [ .. 7] } | |
| vlan-encap | super { ! , protocol: alt { protocol-name: enum (length) { length:1 } , protocol-number: num [ .. 65535] } } | |
| stp-type | super { ! , type: alt { type-name: enum (config | tcn) { config:0, tcn:0x80 } , type-number: num [ .. 255] } } | |
| stp-flags | super { ! , type: alt { type-name: enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 } , type-number: num [ .. 255] } } | |
| stp-root-priority | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-root-address | super { ! , address: macAddr , [mask] /macAddr } | |
| stp-root-cost | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-sender-priority | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-sender-address | super { ! , address: macAddr , [mask] /macAddr } | |
| stp-port | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-msg-age | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-max-age | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-hello-time | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| stp-forward-delay | super { ! , min: num [0 .. 65535] , [max] -num [0 .. 65535] } | |
| ingress-priority | super { ! , priority: num [0 .. 63] } | |
| tls-host | super { ! , tls-host: string } | |
| log | bool | |
| log-prefix | string |