Blame extensions/libip6t_SNPT.man

Packit 7b22a4
Provides stateless source IPv6-to-IPv6 Network Prefix Translation (as described
Packit 7b22a4
by RFC 6296).
Packit 7b22a4
.PP
Packit 7b22a4
You have to use this target in the
Packit 7b22a4
.B mangle
Packit 7b22a4
table, not in the
Packit 7b22a4
.B nat
Packit 7b22a4
table. It takes the following options:
Packit 7b22a4
.TP
Packit 7b22a4
\fB\-\-src\-pfx\fP [\fIprefix/\fP\fIlength]
Packit 7b22a4
Set source prefix that you want to translate and length
Packit 7b22a4
.TP
Packit 7b22a4
\fB\-\-dst\-pfx\fP [\fIprefix/\fP\fIlength]
Packit 7b22a4
Set destination prefix that you want to use in the translation and length
Packit 7b22a4
.PP
Packit 7b22a4
You have to use the DNPT target to undo the translation. Example:
Packit 7b22a4
.IP
Packit 7b22a4
ip6tables \-t mangle \-I POSTROUTING \-s fd00::/64 \! \-o vboxnet0
Packit 7b22a4
\-j SNPT \-\-src-pfx fd00::/64 \-\-dst-pfx 2001:e20:2000:40f::/64
Packit 7b22a4
.IP
Packit 7b22a4
ip6tables \-t mangle \-I PREROUTING \-i wlan0 \-d 2001:e20:2000:40f::/64
Packit 7b22a4
\-j DNPT \-\-src-pfx 2001:e20:2000:40f::/64 \-\-dst-pfx fd00::/64
Packit 7b22a4
.PP
Packit 7b22a4
You may need to enable IPv6 neighbor proxy:
Packit 7b22a4
.IP
Packit 7b22a4
sysctl -w net.ipv6.conf.all.proxy_ndp=1
Packit 7b22a4
.PP
Packit 7b22a4
You also have to use the
Packit 7b22a4
.B NOTRACK
Packit 7b22a4
target to disable connection tracking for translated flows.