diff options
| author | Christian Poessinger <christian@poessinger.com> | 2020-05-01 13:23:20 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2020-05-16 15:30:26 +0200 |
| commit | 40e8938667b06615e0a1a26271a30e00f8cff2c6 (patch) | |
| tree | 9c8243946969cc74bf261e27e6c22ee8cf414a0d /interface-definitions/include/nat-address-port.xml.i | |
| parent | 02ee6b7bf1bcb0a6d55b3d02496d2f501e622ea2 (diff) | |
| download | vyos-1x-40e8938667b06615e0a1a26271a30e00f8cff2c6.tar.gz vyos-1x-40e8938667b06615e0a1a26271a30e00f8cff2c6.zip | |
nat: T2198: initial XML and Python representation
Diffstat (limited to 'interface-definitions/include/nat-address-port.xml.i')
| -rw-r--r-- | interface-definitions/include/nat-address-port.xml.i | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/interface-definitions/include/nat-address-port.xml.i b/interface-definitions/include/nat-address-port.xml.i new file mode 100644 index 000000000..0848364ff --- /dev/null +++ b/interface-definitions/include/nat-address-port.xml.i @@ -0,0 +1,47 @@ +<leafNode name="address"> + <properties> + <help>IP address, subnet, or range</help> + <valueHelp> + <format>ipv4</format> + <description>IPv4 address to match</description> + </valueHelp> + <valueHelp> + <format>ipv4net</format> + <description>IPv4 prefix to match</description> + </valueHelp> + <valueHelp> + <format>ipv4range</format> + <description>IPv4 address range to match</description> + </valueHelp> + <valueHelp> + <format>!ipv4</format> + <description>Match everything except the specified address</description> + </valueHelp> + <valueHelp> + <format>!ipv4net</format> + <description>Match everything except the specified prefix</description> + </valueHelp> + <valueHelp> + <format>!ipv4range</format> + <description>Match everything except the specified range</description> + </valueHelp> + <!-- TODO: add general iptables constraint script --> + </properties> +</leafNode> +<leafNode name="port"> + <properties> + <help>Port number</help> + <valueHelp> + <format>1-65535</format> + <description>Numeric IP port</description> + </valueHelp> + <valueHelp> + <format>start-end</format> + <description>Numbered port range (e.g., 1001-1005)</description> + </valueHelp> + <valueHelp> + <format> </format> + <description>\n\nMultiple destination ports can be specified as a comma-separated list.\nThe whole list can also be negated using '!'.\nFor example: '!22,telnet,http,123,1001-1005'</description> + </valueHelp> + </properties> +</leafNode> |