diff options
| author | Wouter <wouter@xesxen.nl> | 2020-03-24 17:55:07 +0100 |
|---|---|---|
| committer | Wouter <wouter@xesxen.nl> | 2020-03-24 17:55:07 +0100 |
| commit | d3f125bc9f8b7efd56d5c1c8b904945155036895 (patch) | |
| tree | 4fde7172ed55569ce2ad2f7f371818f064c9090d /docs/nptv6.rst | |
| parent | 88bfcb031aa9e0361733c89fe29ae02b12c9ed9a (diff) | |
| download | vyos-documentation-d3f125bc9f8b7efd56d5c1c8b904945155036895.tar.gz vyos-documentation-d3f125bc9f8b7efd56d5c1c8b904945155036895.zip | |
NPTv6: Update commands and ip6tables output
Diffstat (limited to 'docs/nptv6.rst')
| -rw-r--r-- | docs/nptv6.rst | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/docs/nptv6.rst b/docs/nptv6.rst index 240b20ab..dc725a03 100644 --- a/docs/nptv6.rst +++ b/docs/nptv6.rst @@ -44,12 +44,12 @@ NPTv6 support has been added in VyOS 1.2 (Crux) and is available through .. code-block:: none - set rule 10 inside-prefix 'fc00:dead:beef::/48' + set rule 10 source prefix 'fc00:dead:beef::/48' set rule 10 outside-interface 'eth1' - set rule 10 outside-prefix '2001:db8:e1::/48' - set rule 20 inside-prefix 'fc00:dead:beef::/48' + set rule 10 translation prefix '2001:db8:e1::/48' + set rule 20 source prefix 'fc00:dead:beef::/48' set rule 20 outside-interface 'eth2' - set rule 20 outside-prefix '2001:db8:e2::/48' + set rule 20 translation prefix '2001:db8:e2::/48' Resulting in the following ip6tables rules: @@ -57,13 +57,13 @@ Resulting in the following ip6tables rules: Chain VYOS_DNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 DNPT all eth1 any anywhere 2001:db8:e1::/48 src-pfx 2001:db8:e1::/48 dst-pfx fc00:dead:beef::/48 - 0 0 DNPT all eth2 any anywhere 2001:db8:e2::/48 src-pfx 2001:db8:e2::/48 dst-pfx fc00:dead:beef::/48 + 0 0 NETMAP all eth1 any anywhere 2001:db8:e1::/48 to:fc00:dead:beef::/48 + 0 0 NETMAP all eth2 any anywhere 2001:db8:e2::/48 to:fc00:dead:beef::/48 0 0 RETURN all any any anywhere anywhere Chain VYOS_SNPT_HOOK (1 references) pkts bytes target prot opt in out source destination - 0 0 SNPT all any eth1 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e1::/48 - 0 0 SNPT all any eth2 fc00:dead:beef::/48 anywhere src-pfx fc00:dead:beef::/48 dst-pfx 2001:db8:e2::/48 + 0 0 NETMAP all any eth1 fc00:dead:beef::/48 anywhere to:2001:db8:e1::/48 + 0 0 NETMAP all any eth2 fc00:dead:beef::/48 anywhere to:2001:db8:e2::/48 0 0 RETURN all any any anywhere anywhere .. _ULAs: https://en.wikipedia.org/wiki/Unique_local_address |