JAEN

Yamaha

nat descriptor masquerade static

CautionPort forwarding

nat descriptor masquerade static 1000 1 192.168.100.10 tcp 443

Forwards inbound ports to an internal host — remember it only works together with a matching ip filter pass rule.

Examples

  • nat descriptor masquerade static 1000 2 192.168.100.10 udp 500Forward UDP 500 too
  • nat descriptor masquerade static 1000 1 192.168.100.10 tcp wwwA service name works instead of a port number
  • nat descriptor masquerade static 1000 3 192.168.100.20 tcp 10022=22Forward outside port 10022 to inside port 22
  • show nat descriptor address 1000Check current translations

Syntax

nat descriptor masquerade static <desc> <n> <内部IP> <proto> <port>

Key points

  • The second number is the static entry ID. Reusing an ID overwrites the earlier entry.
  • Inbound traffic also needs a pass rule for the same port in the PP's inbound filter (ip filter ... in).
  • The server's default gateway must be this router, or return traffic leaves by another path.

When it does not work

  • Testing from inside via the public IP may fail because of hairpinning. Test from outside, for example over a mobile connection.
  • If the router itself uses the same port (for example 80 for its web UI), change the outside port.

Before you run it

Every opened port widens the attack surface.

Related commands

You can carry a laptop to the rack. Signal will not follow.

Check syntax standing in front of the hardware, with no connection at all. The app keeps 1,510 commands and 120 fix flows on your device. Free to install, no ads (some content is a one-time purchase).

Get it free on the App Store