NAT
The nv unset commands remove the configuration you set with the equivalent nv set commands. This guide only describes an nv unset command if it differs from the nv set command.
nv set acl <acl-id> rule <rule-id> action dest-nat translate-ip
Configures a NAT action rule to translate a destination IP address.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_2 rule 1 action dest-nat translate-ip 10.0.0.1
nv set acl <acl-id> rule <rule-id> action dest-nat translate-ip <ip-address> to <ip-address>
Configures a dynamic NAT rule to translate a destination IP address range.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<ip-address> to <ip-address> | The IP address range. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_4 rule 1 action dest-nat translate-ip 172.30.58.0 to 172.30.58.80
nv set acl <acl-id> rule <rule-id> action dest-nat translate-mac
Configures MAC address translation to translate a destination MAC address to a public address. MAC address translation is equivalent to static NAT but operates at layer 2 on Ethernet frames.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl MACL2 rule 1 action dest-nat translate-mac 99:de:fc:32:11:01
nv set acl <acl-id> rule <rule-id> action dest-nat translate-port <port-id>
Configures a NAT action rule to translate a destination port.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<port-id> | The port number. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_4 rule 1 action dest-nat translate-port 5000
nv set acl <acl-id> rule <rule-id> action source-nat translate-ip <ip-address>
Configures a NAT action rule to translate a source IP address.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<ip-address> | The IP address. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_1 rule 1 action source-nat translate-ip 172.30.58.80
nv set acl <acl-id> rule <rule-id> action source-nat translate-ip <ip-address> to <ip-address>
Configures a NAT action rule to translate a source IP address range.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<ip-address> to <ip-address> | The IP address range. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_1 rule 1 action source-nat translate-ip 172.30.58.0 to 172.30.58.80
nv set acl <acl-id> rule <rule-id> action source-nat translate-port <port-id>
Configures a NAT action rule to translate a source port.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<port-id> | The port number. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl acl_3 rule 1 action source-nat translate-port 6000
nv set acl <acl-id> rule <rule-id> action source-nat translate-mac <mac-address>
Configures a NAT action rule to translate a source MAC address to a public address. MAC address translation is equivalent to static NAT but operates at layer 2 on Ethernet frames.
Command Syntax
| Syntax | Description |
|---|---|
<acl-id> | The ACL name. |
<rule-id> | The ACL rule number. |
<mac-address> | The MAC address. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set acl MACL1 rule 1 action source-nat translate-mac 99:de:fc:32:11:01
nv set system nat age-poll-interval
Configures the period of inactivity (in minutes) before Cumulus Linux releases a NAT entry from the translation table. You can set a value between 1 and 1440. The default value is 5.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set system nat age-poll-interval 10
nv set system nat mode dynamic
Enables and disables dynamic NAT mode. Dynamic NAT maps private IP addresses and ports to a public IP address and port range or a public IP address range and port range. Cumulus Linux assigns IP addresses from a pool of addresses dynamically. When the switch releases entries after a period of inactivity, it maps new incoming connections dynamically to the freed up addresses and ports.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set system nat mode dynamic
nv set system nat rule-table-size
Configures the maximum number of NAT rules allowed. You can set a value between 64 and 1024. The default value is 64.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set system nat rule-table-size 100
nv set system nat translate-table-size
Configures the maximum number of dynamic snat and dnat entries in the translation table. You can set a value between 1024 and 8192. The default value is 1024.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv set system nat translate-table-size 2048