FD.io VPP
v21.01.1
Vector Packet Processing
|
det44 add in <addr>/<plen> out <addr>/<plen> [del].
vpp# det44 add
Create bijective mapping of inside address to outside address and port range
pairs, with the purpose of enabling DET44 to reduce logging in CGN
deployments.
To create mapping between inside network 10.0.0.0/18 and
outside network 1.1.1.0/30 use:
# vpp# det44 add in 10.0.0.0/18 out 1.1.1.0/30
Declaration: det44_map_command (src/plugins/nat/det44/det44_cli.c line 514)
Implementation: det44_map_command_fn.
det44 close session in <in_addr>:<in_port> <ext_addr>:<ext_port>.
vpp# det44 deterministic close session in
Close session using inside ip address and port
and external ip address and port, use:
vpp# det44 close session in 3.3.3.3:3487 2.2.2.2:2387
Declaration: det44_close_session_in_command (src/plugins/nat/det44/det44_cli.c line 608)
Implementation: det44_close_session_in_fn.
det44 close session out <out_addr>:<out_port> <ext_addr>:<ext_port>.
vpp# det44 close session out
Close session using outside ip address and port
and external ip address and port, use:
vpp# det44 close session out 1.1.1.1:1276 2.2.2.2:2387
Declaration: det44_close_sesion_out_command (src/plugins/nat/det44/det44_cli.c line 593)
Implementation: det44_close_session_out_fn.
det44 forward <addr>.
vpp# det44 forward
Return outside address and port range from inside address for DET44.
To obtain outside address and port of inside host use:
vpp# det44 forward 10.0.0.2
1.1.1.0:<1054-1068>
Declaration: det44_forward_command (src/plugins/nat/det44/det44_cli.c line 547)
Implementation: det44_forward_command_fn.
det44 plugin <enable [inside vrf] [outside vrf]|disable>.
vpp# det44 plugin
Enable/disable DET44 plugin.
Declaration: det44_plugin_enable_disable_command (src/plugins/nat/det44/det44_cli.c line 656)
Implementation: det44_plugin_enable_disable_command_fn.
det44 reverse <addr>:<port>.
vpp# det44 reverse
Return inside address from outside address and port for DET44.
To obtain inside host address from outside address and port use:
#vpp det44 reverse 1.1.1.1:1276
10.0.16.16
Declaration: det44_reverse_command (src/plugins/nat/det44/det44_cli.c line 562)
Implementation: det44_reverse_command_fn.
set det44 timeouts <[udp <sec>] [tcp established <sec>] [tcp transitory <sec>] [icmp <sec>]|reset>.
vpp# set det44 timeout
Set values of timeouts for DET44 sessions (in seconds), use:
vpp# set det44 timeouts udp 120 tcp established 7500 tcp transitory 250 icmp 90
To reset default values use:
vpp# set det44 timeouts reset
Declaration: det44_set_timeouts_command (src/plugins/nat/det44/det44_cli.c line 624)
Implementation: det44_set_timeouts_command_fn.
set interface det44 inside <intfc> outside <intfc> [del].
vpp# set interface det44
Enable/disable DET44 feature on the interface.
To enable DET44 feature with local network interface use:
vpp# set interface det44 inside GigabitEthernet0/8/0
To enable DET44 feature with external network interface use:
vpp# set interface det44 outside GigabitEthernet0/a/0
Declaration: det44_feature_command (src/plugins/nat/det44/det44_cli.c line 673)
Implementation: det44_feature_command_fn.
show det44 interfaces.
vpp# show det44 interfaces
Show interfaces with DET44 feature.
vpp# show det44 interfaces
DET44 interfaces:
GigabitEthernet0/8/0 in
GigabitEthernet0/a/0 out
Declaration: det44_show_interfaces_command (src/plugins/nat/det44/det44_cli.c line 690)
Implementation: det44_show_interfaces_command_fn.
show det44 mappings.
Declaration: det44_show_mappings_command (src/plugins/nat/det44/det44_cli.c line 532)
Implementation: det44_show_mappings_command_fn.
show det44 sessions.
vpp# show det44 sessions
Show DET44 sessions.
vpp# show det44 sessions
DET44 sessions:
in 10.0.0.3:3005 out 1.1.1.2:1146 external host 172.16.1.2:3006 state: udp-active expire: 306
in 10.0.0.3:3000 out 1.1.1.2:1141 external host 172.16.1.2:3001 state: udp-active expire: 306
in 10.0.0.4:3005 out 1.1.1.2:1177 external host 172.16.1.2:3006 state: udp-active expire: 306
Declaration: det44_show_sessions_command (src/plugins/nat/det44/det44_cli.c line 579)
Implementation: det44_show_sessions_command_fn.
show det44 timeouts.
vpp# show det44 timeouts
Show values of timeouts for DET44 sessions.
vpp# show det44 timeouts
udp timeout: 300sec
tcp-established timeout: 7440sec
tcp-transitory timeout: 240sec
icmp timeout: 60sec
Declaration: det44_show_timeouts_command (src/plugins/nat/det44/det44_cli.c line 643)
Implementation: det44_show_timeouts_command_fn.