Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

service nat destination rule <rule-number> destination <destination>

Specifies a destination an address, a port, or both, to match in a NAT destination rule.

set service nat destination rule rule-number destination { address address | port port }
delete service nat destination rule rule-number destination [ address address | port port ]
show service nat destination rule rule-number destination
rule-number
The numeric identifier of a rule. The identifier ranges from 1 through 9999.
address
A destination address to match. Address formats are as follows:

ip-address: An IP address.

ip-address/prefix: An IPv4 network address, where 0.0.0.0/0 matches any network.

!ip-address: All IPv4 addresses except the one specified.

!ip-address/prefix: All IPv4 network addresses except the one specified.

port
A destination port to match. Port formats are as follows:

port-name: The name of an IP service; for example, http. You can specify any service name in the etc/services file.

port-number: A port number. The number ranges from 1 through 65535.

start-end: A range of ports; for example, 1001-1005.

Configuration mode

service {
    nat {
        destination {
            rule rule-number {
                destination {
                    address address
                    port port
                }
            }
        }
    }
}

Use care when employing more than one exclusion rule (using the ! symbol), that is, when combining more than one negation operator. NAT rules are evaluated sequentially, and a sequence of exclusion rules could result in unexpected behavior.

Use the set form of this command to specify a destination address and port to match a NAT rule (destination filter).

Use the delete form of this command to remove a destination filter.

Use the show form of this command to view a destination filter.