util dnatutil

util dnatutil(1)	      BIG-IP TMSH Manual	      util dnatutil(1)



NAME
       dnat - command providing reverse and forward mapping for deterministic
       NAT (DNAT)

MODULE
       util

SYNTAX
       Run the dnat utility from within the util module using the following
       syntax:

	run util dnat [] [
[:]]

DESCRIPTION
       The dnat utility allows the calculation of forward and reverse source
       address and port mapping for the deterministic mode of Large Scale NAT.

EXAMPLES
       dnat 10.0.0.1 --action forward Shows a list of translation address/port
       pairs that might be used for a subscriber at 10.0.0.1, using the DNAT
       states contained in /var/log/ltm.

       dnat 173.240.102.139:5678 Performs a reverse mapping back to the
       subscriber address for the connection from 173.240.102.139:5678, using
       the DNAT states contained in /var/log/ltm.

       dnat --start_time '2012-09-27 06:30:00' --end_time '2012-09-27
       12:10:00' 173.240.102.139:5678 Same as the previous example, but only
       shows the subscriber addresses that used the translation within the
       specified time range.

       dnat --start_time '2012-09-27 06:30:00' --end_time '2012-09-27
       12:10:00' --file /var/log/test 173.240.102.139:5678 Same as the
       previous example, but use the DNAT states contained in /var/log/test

       dnat --file /var/log/test Shows summary information, using the DNAT
       states contained in /var/log/test

       dnat --action summary --start_time '2012-09-27 06:30:00' --end_time
       '2012-09-27 12:10:00' Shows summary information, using the DNAT states
       within the specified time range.

OPTIONS
       client_addr or --client_addr 
	    Used to provide the subscriber address for forward mappings
	    (--action forward), and the translation address for reverse
	    mappings (--action reverse).

       client_port or --client_port 
	    Used to provide the subscriber port for forward mappings (--action
	    forward), and the translation port for reverse mappings (--action
	    reverse).

       end_time or --end_time 
	    End time of search range. User can specify the time format via the
	    --time-format switch. The time format defaults to 'YYYY-MM-DD
	    HH:MM:SS.'

       start_time or --start_time 
	    Start time of search range. User can specify the time format via
	    the --time-format switch. The time format defaults to 'YYYY-MM-DD
	    HH:MM:SS.'

       --action 
	    Specify the action to be taken: summary, forward, reverse,
	    reverse_addr. Default: reverse when supplied with client_addr,
	    summary otherwise.

	    summary
		 Provides summary information on the parsed deterministic NAT
		 configuration snippet.

	    reverse
		 Returns possible subscriber address for the provided client
		 address and client port (as translation end-point).

	    forward
		 Returns possible translation end-points for the provided
		 client address (as subscriber address).

	    forward_compact
		 Returns possible subscriber addresses for the provided client
		 address (as translation address), in a compact format with
		 address and port-range.

	    reverse_addr
		 Returns possible subscriber addresses for the provided client
		 address (as translation address).

       --file /var/log/ltm
	    Read DNAT state from file (default: /var/log/ltm)

       --time_format 
	    Timestamp parse format for --start_time or --end_time (default:
	    '%F %T %Z', this yields 'YYYY-MM-DD HH:MM:SS', with timezone being
	    optional.)

       --flags 
	    DAGLIB flags parameter.

       --flags_v2or 
	    DAGLIB flags override parameter, apply when deterministic NAT
	    state is from log version 2 or lower only.

       --all
	    Display all entries, even if there are duplicates (default
	    disabled).

       --version
	    Display version and DAG information.

SEE ALSO
	    run, tmsh, date

COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or
       by any means, electronic or mechanical, including photocopying,
       recording, or information storage and retrieval systems, for any
       purpose other than the purchaser's personal use, without the express
       written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2012-2013, 2016. All rights
       reserved.



BIG-IP				  2016-03-14		      util dnatutil(1)