diff options
| author | Christian Poessinger <christian@poessinger.com> | 2020-03-26 06:39:54 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-03-26 06:39:54 +0100 |
| commit | 217b75f1154fb97304f55ef94ceb196faf2fecab (patch) | |
| tree | bafcccb294b676ec47c66a2a8e35addb51b27b91 | |
| parent | 79fcbc9c33d6b794fc6ebc9875675f3553e9443c (diff) | |
| parent | d3f125bc9f8b7efd56d5c1c8b904945155036895 (diff) | |
| download | vyos-documentation-217b75f1154fb97304f55ef94ceb196faf2fecab.tar.gz vyos-documentation-217b75f1154fb97304f55ef94ceb196faf2fecab.zip | |
Merge pull request #223 from xesxen/master
NPTv6: Update commands and ip6tables output
| -rw-r--r-- | docs/nptv6.rst | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/docs/nptv6.rst b/docs/nptv6.rst index 240b20ab..dc725a03 100644 --- a/docs/nptv6.rst +++ b/docs/nptv6.rst @@ -44,12 +44,12 @@ NPTv6 support has been added in VyOS 1.2 (Crux) and is available through .. code-block:: none - set rule 10 inside-prefix 'fc00:dead:beef::/48' + set rule 10 source prefix 'fc00:dead:beef::/48' set rule 10 outside-interface 'eth1' - set rule 10 outside-prefix '2001:db8:e1::/48' - set rule 20 inside-prefix 'fc00:dead:beef::/48' + set rule 10 translation prefix '2001:db8:e1::/48' + set rule 20 source prefix 'fc00:dead:beef::/48' set rule 20 outside-interface 'eth2' - set rule 20 outside-prefix '2001:db8:e2::/48' + set rule 20 translation prefix '2001:db8:e2::/48' Resulting in the following ip6tables rules: @@ -57,13 +57,13 @@ Resulting in the following ip6tables rules: Chain VYOS_DNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 DNPT all eth1 any anywhere 2001:db8:e1::/48 src-pfx 2001:db8:e1::/48 dst-pfx fc00:dead:beef::/48 - 0 0 DNPT all eth2 any anywhere 2001:db8:e2::/48 src-pfx 2001:db8:e2::/48 dst-pfx fc00:dead:beef::/48 + 0 0 NETMAP all eth1 any anywhere 2001:db8:e1::/48 to:fc00:dead:beef::/48 + 0 0 NETMAP all eth2 any anywhere 2001:db8:e2::/48 to:fc00:dead:beef::/48 0 0 RETURN all any any anywhere anywhere Chain VYOS_SNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 SNPT all any eth1 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e1::/48 - 0 0 SNPT all any eth2 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e2::/48 + 0 0 NETMAP all any eth1 fc00:dead:beef::/48 anywhere to:2001:db8:e1::/48 + 0 0 NETMAP all any eth2 fc00:dead:beef::/48 anywhere to:2001:db8:e2::/48 0 0 RETURN all any any anywhere anywhere .. _ULAs: https://en.wikipedia.org/wiki/Unique_local_address |