summaryrefslogtreecommitdiff
path: root/interface-definitions/include/nat-address-port.xml.i
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2020-05-01 13:23:20 +0200
committerChristian Poessinger <christian@poessinger.com>2020-05-16 15:30:26 +0200
commit40e8938667b06615e0a1a26271a30e00f8cff2c6 (patch)
tree9c8243946969cc74bf261e27e6c22ee8cf414a0d /interface-definitions/include/nat-address-port.xml.i
parent02ee6b7bf1bcb0a6d55b3d02496d2f501e622ea2 (diff)
downloadvyos-1x-40e8938667b06615e0a1a26271a30e00f8cff2c6.tar.gz
vyos-1x-40e8938667b06615e0a1a26271a30e00f8cff2c6.zip
nat: T2198: initial XML and Python representation
Diffstat (limited to 'interface-definitions/include/nat-address-port.xml.i')
-rw-r--r--interface-definitions/include/nat-address-port.xml.i47
1 files changed, 47 insertions, 0 deletions
diff --git a/interface-definitions/include/nat-address-port.xml.i b/interface-definitions/include/nat-address-port.xml.i
new file mode 100644
index 000000000..0848364ff
--- /dev/null
+++ b/interface-definitions/include/nat-address-port.xml.i
@@ -0,0 +1,47 @@
+<leafNode name="address">
+ <properties>
+ <help>IP address, subnet, or range</help>
+ <valueHelp>
+ <format>ipv4</format>
+ <description>IPv4 address to match</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv4net</format>
+ <description>IPv4 prefix to match</description>
+ </valueHelp>
+ <valueHelp>
+ <format>ipv4range</format>
+ <description>IPv4 address range to match</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4</format>
+ <description>Match everything except the specified address</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4net</format>
+ <description>Match everything except the specified prefix</description>
+ </valueHelp>
+ <valueHelp>
+ <format>!ipv4range</format>
+ <description>Match everything except the specified range</description>
+ </valueHelp>
+ <!-- TODO: add general iptables constraint script -->
+ </properties>
+</leafNode>
+<leafNode name="port">
+ <properties>
+ <help>Port number</help>
+ <valueHelp>
+ <format>1-65535</format>
+ <description>Numeric IP port</description>
+ </valueHelp>
+ <valueHelp>
+ <format>start-end</format>
+ <description>Numbered port range (e.g., 1001-1005)</description>
+ </valueHelp>
+ <valueHelp>
+ <format> </format>
+ <description>\n\nMultiple destination ports can be specified as a comma-separated list.\nThe whole list can also be negated using '!'.\nFor example: '!22,telnet,http,123,1001-1005'</description>
+ </valueHelp>
+ </properties>
+</leafNode>