VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling 2024-06-10T11:11:02+00:00 2024-06-10T11:11:02+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-06-10T11:11:02+00:00 urn:sha1:d6108d6e0a14f32d7ee28df01b5a4fcd678acada Add the configuration command to log current CGNAT allocation set nat cgnat log-allocation 2024-05-18T15:13:44+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-05-18T15:13:44+00:00 urn:sha1:2371c26b55db133b3864e54f460a046898e55abf Allow to set multiple CGNAT internal pools ``` set nat cgnat pool internal int-01 range '100.64.0.0/28' set nat cgnat pool internal int-01 range '100.64.222.11-100.64.222.14' ``` 2024-04-09T15:36:43+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2024-04-07T14:15:36+00:00 urn:sha1:6f9e6159be265ca91f873576d15ccbbc061fed8d Add PoC for generating CGNAT rules https://datatracker.ietf.org/doc/html/rfc6888 Not all requirements are implemented, but some of them. Implemented: REQ-2 ``` A CGN MUST have a default "IP address pooling" behavior of "Paired" CGN must use the same external IP address mapping for all sessions associated with the same internal IP address, be they TCP, UDP, ICMP, something else, or a mix of different protocols. ``` REQ-3 ``` The CGN function SHOULD NOT have any limitations on the size or the contiguity of the external address pool ``` REQ-4 ``` A CGN MUST support limiting the number of external ports (or, equivalently, "identifiers" for ICMP) that are assigned per subscriber ``` CLI: ``` set nat cgnat pool external ext1 external-port-range '1024-65535' set nat cgnat pool external ext1 per-user-limit port '1000' set nat cgnat pool external ext1 range 192.0.2.222/32 set nat cgnat pool internal int1 range '100.64.0.0/28' set nat cgnat rule 10 source pool 'int1' set nat cgnat rule 10 translation pool 'ext1' ```