Rule number for NAT 1-9999 Number for this NAT rule NAT rule number must be between 1 and 9999 Rule description NAT destination parameters #include #include Disable NAT rule Exclude packets matching this rule from NAT NAT rule logging Protocol to NAT all ip hopopt icmp igmp ggp ipencap st tcp egp igp pup udp tcp_udp hmp xns-idp rdp iso-tp4 dccp xtp ddp idpr-cmtp ipv6 ipv6-route ipv6-frag idrp rsvp gre esp ah skip ipv6-icmp ipv6-nonxt ipv6-opts rspf vmtp eigrp ospf ax.25 ipip etherip encap 99 pim ipcomp vrrp l2tp isis sctp fc mobility-header udplite mpls-in-ip manet hip shim6 wesp rohc all All IP protocols ip Internet Protocol, pseudo protocol number hopopt IPv6 Hop-by-Hop Option [RFC1883] icmp internet control message protocol igmp Internet Group Management ggp gateway-gateway protocol ipencap IP encapsulated in IP (officially IP) st ST datagram mode tcp transmission control protocol egp exterior gateway protocol igp any private interior gateway (Cisco) pup PARC universal packet protocol udp user datagram protocol tcp_udp Both TCP and UDP hmp host monitoring protocol xns-idp Xerox NS IDP rdp "reliable datagram" protocol iso-tp4 ISO Transport Protocol class 4 [RFC905] dccp Datagram Congestion Control Prot. [RFC4340] xtp Xpress Transfer Protocol ddp Datagram Delivery Protocol idpr-cmtp IDPR Control Message Transport Ipv6 Internet Protocol, version 6 ipv6-route Routing Header for IPv6 ipv6-frag Fragment Header for IPv6 idrp Inter-Domain Routing Protocol rsvp Reservation Protocol gre General Routing Encapsulation esp Encap Security Payload [RFC2406] ah Authentication Header [RFC2402] skip SKIP ipv6-icmp ICMP for IPv6 ipv6-nonxt No Next Header for IPv6 ipv6-opts Destination Options for IPv6 rspf Radio Shortest Path First (officially CPHB) vmtp Versatile Message Transport eigrp Enhanced Interior Routing Protocol (Cisco) ospf Open Shortest Path First IGP ax.25 AX.25 frames ipip IP-within-IP Encapsulation Protocol etherip Ethernet-within-IP Encapsulation [RFC3378] encap Yet Another IP encapsulation [RFC1241] 99 Any private encryption scheme pim Protocol Independent Multicast ipcomp IP Payload Compression Protocol vrrp Virtual Router Redundancy Protocol [RFC5798] l2tp Layer Two Tunneling Protocol [RFC2661] isis IS-IS over IPv4 sctp Stream Control Transmission Protocol fc Fibre Channel mobility-header Mobility Support for IPv6 [RFC3775] udplite UDP-Lite [RFC3828] mpls-in-ip MPLS-in-IP [RFC4023] manet MANET Protocols [RFC5498] hip Host Identity Protocol shim6 Shim6 Protocol wesp Wrapped Encapsulating Security Payload rohc Robust Header Compression 0-255 IP protocol number !?(all|ip|hopopt|icmp|igmp|ggp|ipencap|st|tcp|egp|igp|pup|udp|tcp_udp|hmp|xns-idp|rdp|iso-tp4|dccp|xtp|ddp|idpr-cmtp|ipv6|ipv6-route|ipv6-frag|idrp|rsvp|gre|esp|ah|skip|ipv6-icmp|ipv6-nonxt|ipv6-opts|rspf|vmtp|eigrp|ospf|ax.25|ipip|etherip|encap|99|pim|ipcomp|vrrp|l2tp|isis|sctp|fc|mobility-header|udplite|mpls-in-ip|manet|hip|shim6|wesp|rohc|[01]?[0-9][0-9]?) NAT source parameters #include #include