ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Guia do Utilizador descarregar pdf (Página 141)

Chapter 16 IPSec VPN

ZyWALL (ZLD) CLI Reference Guide

141

in-snat source address_name destination

address_name snat address_name

Configures in-bound traffic SNAT in the IPSec SA.

[no] in-dnat activate Enables in-bound traffic DNAT in the IPSec SA.

The

no command disables in-bound traffic DNAT

in the IPSec SA.

in-dnat delete <1..10> Deletes the specified rule for in-bound traffic DNAT

in the specified IPSec SA.

in-dnat move <1..10> to <1..10> Moves the specified rule (first rule number) to the

specified location (second rule number) for in-

bound traffic DNAT.

in-dnat append protocol {all | tcp | udp}

original-ip address_name <0..65535>

<0..65535> mapped-ip address_name

<0..65535> <0..65535>

Maps the specified IP address and port range

(original-ip) to the specified IP address and port

range (mapped-ip) and appends this rule to the end

of the rule list for in-bound traffic DNAT.

in-dnat insert <1..10> protocol {all | tcp

| udp} original-ip address_name <0..65535>

<0..65535> mapped-ip address_name

<0..65535> <0..65535>

Maps the specified IP address and port range

(original-ip) to the specified IP address and port

range (mapped-ip) and inserts this rule before the

specified rule.

in-dnat <1..10> protocol {all | tcp | udp}

original-ip address_name <0..65535>

<0..65535> mapped-ip address_name

<0..65535> <0..65535>

Creates or revises the specified rule and maps the

specified IP address and port range (original-ip) to

the specified IP address and port range (mapped-

ip).

Table 69 crypto Commands: IPSec SAs (continued)

COMMAND DESCRIPTION

1 2 ... 136 137 138 139 140 141 142 143 144 145 146 ... 385 386

Sem comentários

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Guia do Utilizador Página 141