From 14011bee699372746b3770c877570937319d0cbb Mon Sep 17 00:00:00 2001 From: Igor Melnyk Date: Sat, 26 Jun 2021 10:48:54 +0300 Subject: nat: T1083: add translation options for persistent/random mapping of address and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random' --- .../include/nat-translation-options.xml.i | 51 ++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 interface-definitions/include/nat-translation-options.xml.i (limited to 'interface-definitions/include/nat-translation-options.xml.i') diff --git a/interface-definitions/include/nat-translation-options.xml.i b/interface-definitions/include/nat-translation-options.xml.i new file mode 100644 index 000000000..defc8c0d5 --- /dev/null +++ b/interface-definitions/include/nat-translation-options.xml.i @@ -0,0 +1,51 @@ + + + + Translation options + + + + + Address mapping options + + persistent random + + + persistent + Gives a client the same source or destination-address for each connection + + + random + Random source or destination address allocation for each connection (defaut) + + + ^(persistent|random)$ + + + + + + Port mapping options + + random fully-random none + + + random + Randomize source port mapping + + + fully-random + Full port randomization + + + none + Do not apply port randomization (default) + + + ^(random|fully-random|none)$ + + + + + + -- cgit v1.2.3