Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Improve the "Map" section.

This commit is contained in:
maxv 2018-08-27 13:09:16 +00:00
parent c4abcc5a94
commit 6cf056e7fd
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
usr.sbin/npf/npfctl/npf.conf.5
View File

@ -1,4 +1,4 @@
.\" $NetBSD: npf.conf.5,v 1.64 2018/08/27 12:46:03 maxv Exp $
.\" $NetBSD: npf.conf.5,v 1.65 2018/08/27 13:09:16 maxv Exp $
.\"
.\" Copyright (c) 2009-2017 The NetBSD Foundation, Inc.
.\" All rights reserved.
@ -258,12 +258,22 @@ inbound NAT (translation of the destination)
bi-directional NAT (combination of inbound and outbound NAT)
.El
.Pp
The following would translate the source to the IP address specified
by the $pub_ip for the packets on the interface $ext_if.
The following would translate the source (10.1.1.0/24) to the IP address
specified by $pub_ip for the packets on the interface $ext_if.
.Bd -literal
map $ext_if dynamic 10.1.1.0/24 -> $pub_ip
.Ed
.Pp
Several NAT algorithms are available, and can be chosen using the
.Cd algo
keyword.
By default, NPF will use the NAPT algorithm.
The other available algorithms are:
.Bl -tag -width Xnpt66XX -offset indent
.It npt66
IPv6-to-IPv6 network prefix translation (NPTv6).
.El
.Pp
Translations are implicitly filtered by limiting the operation to the
network segments specified, that is, translation would be performed only
on packets originating from the 10.1.1.0/24 network.