7-38
Command Sets for Command Line Interface
Commands for NAT process
1. ip nat
Syntax:
ip nat add|delete <i/f name>
Description:
This command adds or removes NAT functionality from the named
interface. The interface name is the name as listed by the ip device
command. NAT should always be enabled only on the interface
connecting to the public network, not the interface connecting to the
private network.
Example:
> ip nat add ppp_device
2. nat interfaces
Syntax:
nat interfaces
Description:
The nat interfaces command displays the IP router ports on
which NAT is currently enabled. For each of these, a status and IP
address is listed. The IP address is discovered automatically from the
IP stack. The status shows the user whether NAT is currently
operational on that interface (“enabled”), or whether NAT is still
waiting to find out the interface’s IP address (“not ready”).
Example:
> nat interfaces
Name Status IP address
ethernet enabled 194.129.40.2
ppp not ready
3. nat inbound
Syntax:
nat inbound list
nat inbound add <i/f> <port>/<proto> <new IP> [quiet]
nat inbound delete <#>
nat inbound flush
Description:
This command enables the user to list or to set up a series of rules, to
determine what happens to incoming traffic. By default all incoming
packets, other that packets arriving in response to outgoing traffic
will be rejected.