Rule number for NAT
u32:1-999999
Number of NAT rule
NAT rule number must be between 1 and 999999
#include
NAT destination parameters
#include
#include
#include
#include
#include
Apply NAT load balance
#include
#include
#include
Packet type
broadcast host multicast other
broadcast
Match broadcast packet type
host
Match host packet type, addressed to local host
multicast
Match multicast packet type
other
Match packet addressed to another host
(broadcast|host|multicast|other)
Protocol to NAT
all ip hopopt icmp igmp ggp ipencap st tcp egp igp pup udp tcp_udp hmp xns-idp rdp iso-tp4 dccp xtp ddp idpr-cmtp ipv6 ipv6-route ipv6-frag idrp rsvp gre esp ah skip ipv6-icmp ipv6-nonxt ipv6-opts rspf vmtp eigrp ospf ax.25 ipip etherip encap 99 pim ipcomp vrrp l2tp isis sctp fc mobility-header udplite mpls-in-ip manet hip shim6 wesp rohc
all
All IP protocols
ip
Internet Protocol, pseudo protocol number
hopopt
IPv6 Hop-by-Hop Option [RFC1883]
icmp
internet control message protocol
igmp
Internet Group Management
ggp
gateway-gateway protocol
ipencap
IP encapsulated in IP (officially IP)
st
ST datagram mode
tcp
transmission control protocol
egp
exterior gateway protocol
igp
any private interior gateway (Cisco)
pup
PARC universal packet protocol
udp
user datagram protocol
tcp_udp
Both TCP and UDP
hmp
host monitoring protocol
xns-idp
Xerox NS IDP
rdp
"reliable datagram" protocol
iso-tp4
ISO Transport Protocol class 4 [RFC905]
dccp
Datagram Congestion Control Prot. [RFC4340]
xtp
Xpress Transfer Protocol
ddp
Datagram Delivery Protocol
idpr-cmtp
IDPR Control Message Transport
Ipv6
Internet Protocol, version 6
ipv6-route
Routing Header for IPv6
ipv6-frag
Fragment Header for IPv6
idrp
Inter-Domain Routing Protocol
rsvp
Reservation Protocol
gre
General Routing Encapsulation
esp
Encap Security Payload [RFC2406]
ah
Authentication Header [RFC2402]
skip
SKIP
ipv6-icmp
ICMP for IPv6
ipv6-nonxt
No Next Header for IPv6
ipv6-opts
Destination Options for IPv6
rspf
Radio Shortest Path First (officially CPHB)
vmtp
Versatile Message Transport
eigrp
Enhanced Interior Routing Protocol (Cisco)
ospf
Open Shortest Path First IGP
ax.25
AX.25 frames
ipip
IP-within-IP Encapsulation Protocol
etherip
Ethernet-within-IP Encapsulation [RFC3378]
encap
Yet Another IP encapsulation [RFC1241]
99
Any private encryption scheme
pim
Protocol Independent Multicast
ipcomp
IP Payload Compression Protocol
vrrp
Virtual Router Redundancy Protocol [RFC5798]
l2tp
Layer Two Tunneling Protocol [RFC2661]
isis
IS-IS over IPv4
sctp
Stream Control Transmission Protocol
fc
Fibre Channel
mobility-header
Mobility Support for IPv6 [RFC3775]
udplite
UDP-Lite [RFC3828]
mpls-in-ip
MPLS-in-IP [RFC4023]
manet
MANET Protocols [RFC5498]
hip
Host Identity Protocol
shim6
Shim6 Protocol
wesp
Wrapped Encapsulating Security Payload
rohc
Robust Header Compression
u32:0-255
IP protocol number
all
NAT source parameters
#include
#include
#include