47 lines
2.3 KiB
Plaintext
47 lines
2.3 KiB
Plaintext
OsmoUPF> enable
|
|
OsmoUPF# configure terminal
|
|
OsmoUPF(config)# tunmap
|
|
|
|
OsmoUPF(config-tunmap)# show nft-rule tunmap example
|
|
% init verdict map:
|
|
add table inet osmo-upf { flags owner; };
|
|
|
|
add chain inet osmo-upf pre { type filter hook prerouting priority -300; policy accept; };
|
|
add chain inet osmo-upf post { type filter hook postrouting priority 400; policy accept; };
|
|
add map inet osmo-upf tunmap-pre { typeof ip daddr . @ih,32,32 : verdict; };
|
|
add map inet osmo-upf tunmap-post { typeof meta mark : verdict; };
|
|
add rule inet osmo-upf pre udp dport 2152 ip daddr . @ih,32,32 vmap @tunmap-pre;
|
|
add rule inet osmo-upf post meta mark vmap @tunmap-post;
|
|
|
|
% add tunmap:
|
|
% ACCESS 1.1.1.1:0x102 <---> 2.2.2.1:0x201 UPF 2.2.2.3:0x203 <---> 3.3.3.3:0x302 CORE
|
|
add chain inet osmo-upf tunmap-pre-123;
|
|
add rule inet osmo-upf tunmap-pre-123 ip daddr set 3.3.3.3 meta mark set 123 counter accept;
|
|
add chain inet osmo-upf tunmap-post-123;
|
|
add rule inet osmo-upf tunmap-post-123 ip saddr set 2.2.2.3 @ih,32,32 set 0x302 counter accept;
|
|
add element inet osmo-upf tunmap-pre { 2.2.2.1 . 0x201 : jump tunmap-pre-123 };
|
|
add element inet osmo-upf tunmap-post { 123 : jump tunmap-post-123 };
|
|
add chain inet osmo-upf tunmap-pre-321;
|
|
add rule inet osmo-upf tunmap-pre-321 ip daddr set 1.1.1.1 meta mark set 321 counter accept;
|
|
add chain inet osmo-upf tunmap-post-321;
|
|
add rule inet osmo-upf tunmap-post-321 ip saddr set 2.2.2.1 @ih,32,32 set 0x102 counter accept;
|
|
add element inet osmo-upf tunmap-pre { 2.2.2.3 . 0x203 : jump tunmap-pre-321 };
|
|
add element inet osmo-upf tunmap-post { 321 : jump tunmap-post-321 };
|
|
|
|
% delete tunmap:
|
|
delete element inet osmo-upf tunmap-pre { 2.2.2.1 . 0x201 };
|
|
delete element inet osmo-upf tunmap-post { 123 };
|
|
delete chain inet osmo-upf tunmap-pre-123;
|
|
delete chain inet osmo-upf tunmap-post-123;
|
|
delete element inet osmo-upf tunmap-pre { 2.2.2.3 . 0x203 };
|
|
delete element inet osmo-upf tunmap-post { 321 };
|
|
delete chain inet osmo-upf tunmap-pre-321;
|
|
delete chain inet osmo-upf tunmap-post-321;
|
|
|
|
OsmoUPF(config-tunmap)# show nft-rule tunmap append
|
|
% deprecated config option: 'show nft-rule tunmap append'
|
|
OsmoUPF(config-tunmap)# nft-rule tunmap append meta nftrace set 1
|
|
% deprecated config option: 'nft-rule tunmap append'
|
|
OsmoUPF(config-tunmap)# no nft-rule tunmap append
|
|
% deprecated config option: 'no nft-rule tunmap append'
|