Blame extensions/libip6t_SNPT.man
|
Packit |
7b22a4 |
Provides stateless source IPv6-to-IPv6 Network Prefix Translation (as described
|
|
Packit |
7b22a4 |
by RFC 6296).
|
|
Packit |
7b22a4 |
.PP
|
|
Packit |
7b22a4 |
You have to use this target in the
|
|
Packit |
7b22a4 |
.B mangle
|
|
Packit |
7b22a4 |
table, not in the
|
|
Packit |
7b22a4 |
.B nat
|
|
Packit |
7b22a4 |
table. It takes the following options:
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-src\-pfx\fP [\fIprefix/\fP\fIlength]
|
|
Packit |
7b22a4 |
Set source prefix that you want to translate and length
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-dst\-pfx\fP [\fIprefix/\fP\fIlength]
|
|
Packit |
7b22a4 |
Set destination prefix that you want to use in the translation and length
|
|
Packit |
7b22a4 |
.PP
|
|
Packit |
7b22a4 |
You have to use the DNPT target to undo the translation. Example:
|
|
Packit |
7b22a4 |
.IP
|
|
Packit |
7b22a4 |
ip6tables \-t mangle \-I POSTROUTING \-s fd00::/64 \! \-o vboxnet0
|
|
Packit |
7b22a4 |
\-j SNPT \-\-src-pfx fd00::/64 \-\-dst-pfx 2001:e20:2000:40f::/64
|
|
Packit |
7b22a4 |
.IP
|
|
Packit |
7b22a4 |
ip6tables \-t mangle \-I PREROUTING \-i wlan0 \-d 2001:e20:2000:40f::/64
|
|
Packit |
7b22a4 |
\-j DNPT \-\-src-pfx 2001:e20:2000:40f::/64 \-\-dst-pfx fd00::/64
|
|
Packit |
7b22a4 |
.PP
|
|
Packit |
7b22a4 |
You may need to enable IPv6 neighbor proxy:
|
|
Packit |
7b22a4 |
.IP
|
|
Packit |
7b22a4 |
sysctl -w net.ipv6.conf.all.proxy_ndp=1
|
|
Packit |
7b22a4 |
.PP
|
|
Packit |
7b22a4 |
You also have to use the
|
|
Packit |
7b22a4 |
.B NOTRACK
|
|
Packit |
7b22a4 |
target to disable connection tracking for translated flows.
|