Changeset View
Changeset View
Standalone View
Standalone View
share/man/man5/pf.conf.5
Context not available. | |||||
option prevents | option prevents | ||||
.Xr pf 4 | .Xr pf 4 | ||||
from modifying the source port on TCP and UDP packets. | from modifying the source port on TCP and UDP packets. | ||||
.It Xo Ar map-e-portset Aq Ar psid-offset | |||||
.No / Aq Ar psid-len | |||||
.No / Aq Ar psid | |||||
.Xc | |||||
With | |||||
.Ar nat | |||||
rules, the | |||||
.Ar map-e-portset | |||||
option enables the MAP-E (RFC 7597) source port translation. | |||||
Setting up tunneling interface and pass rules for encapsulated packets | |||||
are required in addition to the MAP-E nat rule. | |||||
.Pp | |||||
For example: | |||||
.Bd -literal -offset indent | |||||
nat on $gif_mape_if from $int_if:network to any \e | |||||
-> $ipv4_mape_src map-e-portset 6/8/0x34 | |||||
.Ed | |||||
.Pp | |||||
sets PSID offset 6, PSID length 8, PSID 0x34. | |||||
.Ed | |||||
.El | .El | ||||
.Pp | .Pp | ||||
Additionally, the | Additionally, the | ||||
Context not available. | |||||
[ "on" ifspec ] [ af ] | [ "on" ifspec ] [ af ] | ||||
[ protospec ] hosts [ "tag" string ] [ "tagged" string ] | [ protospec ] hosts [ "tag" string ] [ "tagged" string ] | ||||
[ "-\*(Gt" ( redirhost | "{" redirhost-list "}" ) | [ "-\*(Gt" ( redirhost | "{" redirhost-list "}" ) | ||||
[ portspec ] [ pooltype ] [ "static-port" ] ] | [ portspec ] [ pooltype ] [ "static-port" ] | ||||
[ "map-e-portset" number "/" number "/" number ] ] | |||||
binat-rule = [ "no" ] "binat" [ "pass" [ "log" [ "(" logopts ")" ] ] ] | binat-rule = [ "no" ] "binat" [ "pass" [ "log" [ "(" logopts ")" ] ] ] | ||||
[ "on" interface-name ] [ af ] | [ "on" interface-name ] [ af ] | ||||
Context not available. |