From d3f125bc9f8b7efd56d5c1c8b904945155036895 Mon Sep 17 00:00:00 2001 From: Wouter Date: Tue, 24 Mar 2020 17:55:07 +0100 Subject: NPTv6: Update commands and ip6tables output --- docs/nptv6.rst | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/nptv6.rst b/docs/nptv6.rst index 240b20ab..dc725a03 100644 --- a/docs/nptv6.rst +++ b/docs/nptv6.rst @@ -44,12 +44,12 @@ NPTv6 support has been added in VyOS 1.2 (Crux) and is available through .. code-block:: none - set rule 10 inside-prefix 'fc00:dead:beef::/48' + set rule 10 source prefix 'fc00:dead:beef::/48' set rule 10 outside-interface 'eth1' - set rule 10 outside-prefix '2001:db8:e1::/48' - set rule 20 inside-prefix 'fc00:dead:beef::/48' + set rule 10 translation prefix '2001:db8:e1::/48' + set rule 20 source prefix 'fc00:dead:beef::/48' set rule 20 outside-interface 'eth2' - set rule 20 outside-prefix '2001:db8:e2::/48' + set rule 20 translation prefix '2001:db8:e2::/48' Resulting in the following ip6tables rules: @@ -57,13 +57,13 @@ Resulting in the following ip6tables rules: Chain VYOS_DNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 DNPT all eth1 any anywhere 2001:db8:e1::/48 src-pfx 2001:db8:e1::/48 dst-pfx fc00:dead:beef::/48 - 0 0 DNPT all eth2 any anywhere 2001:db8:e2::/48 src-pfx 2001:db8:e2::/48 dst-pfx fc00:dead:beef::/48 + 0 0 NETMAP all eth1 any anywhere 2001:db8:e1::/48 to:fc00:dead:beef::/48 + 0 0 NETMAP all eth2 any anywhere 2001:db8:e2::/48 to:fc00:dead:beef::/48 0 0 RETURN all any any anywhere anywhere Chain VYOS_SNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 SNPT all any eth1 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e1::/48 - 0 0 SNPT all any eth2 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e2::/48 + 0 0 NETMAP all any eth1 fc00:dead:beef::/48 anywhere to:2001:db8:e1::/48 + 0 0 NETMAP all any eth2 fc00:dead:beef::/48 anywhere to:2001:db8:e2::/48 0 0 RETURN all any any anywhere anywhere .. _ULAs: https://en.wikipedia.org/wiki/Unique_local_address -- cgit v1.2.3