onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-13 08:29:32 +02:00
Code Issues Releases Wiki Activity

* PIXImporterNat.cpp (buildDNATRule): see #2313 "NAT with

Browse Source 
access-list destination address and original service not set".
"Nat" and "static" commands that use access-list should import all
components of the access-list command (source, destination and
service/protocol).
This commit is contained in:
Vadim Kurland
2011-04-05 19:59:13 -07:00
parent e3383349b0
commit d5f95e0f2a
6 changed files with 682 additions and 579 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/ChangeLog
+6
View File
@@ -1,5 +1,11 @@
2011-04-05 vadim <vadim@netcitadel.com>
* PIXImporterNat.cpp (buildDNATRule): see #2313 "NAT with
access-list destination address and original service not set".
"Nat" and "static" commands that use access-list should import all
components of the access-list command (source, destination and
service/protocol).
* PIXImporterNat.cpp (buildSNATRule): see #2310 "Imported global /
nat rule has wrong interface defined". Importer mixed up inbound
and outbound interfaces in NAT commands created from combination
src/import/PIXImporter.h
+1 -1
View File
@@ -70,7 +70,7 @@ class PIXImporter : public IOSImporter
{
libfwbuilder::FWObject* getMirroredServiceObject(libfwbuilder::FWObject *obj);
libfwbuilder::FWObject* mirrorServiceObjectRecursively(libfwbuilder::FWObject *obj);
public:
QString named_object_name;
src/import/PIXImporterNat.cpp
+45 -18
View File
@@ -167,20 +167,34 @@ void PIXImporter::buildDNATRule()
UnidirectionalRuleSet *rs = all_rulesets[real_addr_acl];
if (rs)
{
RuleElement* tdst = rule->getTDst();
assert(tdst!=NULL);
PolicyRule *policy_rule = PolicyRule::cast(
rs->ruleset->getFirstByType(PolicyRule::TYPENAME));
if (policy_rule)
{
RuleElement *src = policy_rule->getSrc();
for (FWObject::iterator it=src->begin(); it!=src->end(); ++it)
{
FWObject *o = FWReference::getObject(*it);
tdst->addRef(o);
}
RuleElement* osrc = rule->getOSrc();
RuleElement* osrv = rule->getOSrv();
RuleElement* tdst = rule->getTDst();
/* copy objects from a policy rule into
* rule elements of a nat rule
*
* Src --> TDst
* Dst --> OSrc
* Srv --> OSrv
*/
RuleElement *re = policy_rule->getSrc();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
tdst->addRef(FWReference::getObject(*it));
re = policy_rule->getDst();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrc->addRef(FWReference::getObject(*it));
re = policy_rule->getSrv();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrv->addRef(FWReference::getObject(*it));
}
rs->to_be_deleted = true;
@@ -280,20 +294,33 @@ void PIXImporter::buildSNATRule()
UnidirectionalRuleSet *rs = all_rulesets[nat_acl];
if (rs)
{
RuleElement* osrc = rule->getOSrc();
assert(osrc!=NULL);
PolicyRule *policy_rule = PolicyRule::cast(
rs->ruleset->getFirstByType(PolicyRule::TYPENAME));
if (policy_rule)
{
RuleElement *src = policy_rule->getSrc();
for (FWObject::iterator it=src->begin(); it!=src->end(); ++it)
{
FWObject *o = FWReference::getObject(*it);
osrc->addRef(o);
}
RuleElement* osrc = rule->getOSrc();
RuleElement* odst = rule->getODst();
RuleElement* osrv = rule->getOSrv();
/* copy objects from a policy rule into "original"
* rule elements of a nat rule
*
* Src --> OSrc
* Dst --> ODst
* Srv --> OSrv
*/
RuleElement *re = policy_rule->getSrc();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrc->addRef(FWReference::getObject(*it));
re = policy_rule->getDst();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
odst->addRef(FWReference::getObject(*it));
re = policy_rule->getSrv();
for (FWObject::iterator it=re->begin(); it!=re->end(); ++it)
osrv->addRef(FWReference::getObject(*it));
}
rs->to_be_deleted = true;
src/unit_tests/PIXImporterTest/test_data/pix7-nat.fwb
+597 -538
View File
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302056910" id="root">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1302058658" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@@ -441,198 +441,93 @@
<IPv4 id="id9" name="h-10.0.0.253" comment="Created during import of line 80" ro="False" address="10.0.0.253" netmask="255.255.255.255"/>
<IPv4 id="id10" name="h-10.0.0.254" comment="Created during import of line 81" ro="False" address="10.0.0.254" netmask="255.255.255.255"/>
<IPv4 id="id11" name="h-10.1.1.43" comment="Created during import of line 106" ro="False" address="10.1.1.43" netmask="255.255.255.255"/>
<IPv4 id="id12" name="h-10.1.1.1" comment="Created during import of line 141" ro="False" address="10.1.1.1" netmask="255.255.255.255"/>
<IPv4 id="id13" name="h-192.0.2.10" comment="Created during import of line 141" ro="False" address="192.0.2.10" netmask="255.255.255.255"/>
<IPv4 id="id14" name="h-10.1.1.16" comment="Created during import of line 145" ro="False" address="10.1.1.16" netmask="255.255.255.255"/>
<IPv4 id="id15" name="h-10.0.0.100" comment="Created during import of line 146" ro="False" address="10.0.0.100" netmask="255.255.255.255"/>
<IPv4 id="id16" name="h-10.1.1.100" comment="Created during import of line 146" ro="False" address="10.1.1.100" netmask="255.255.255.255"/>
<IPv4 id="id17" name="h-10.1.1.111" comment="Created during import of line 147" ro="False" address="10.1.1.111" netmask="255.255.255.255"/>
<IPv4 id="id18" name="h-10.5.80.200" comment="Created during import of line 149" ro="False" address="10.5.80.200" netmask="255.255.255.255"/>
<IPv4 id="id19" name="h-10.10.1.200" comment="Created during import of line 149" ro="False" address="10.10.1.200" netmask="255.255.255.255"/>
<IPv4 id="id20" name="h-192.0.2.100" comment="Created during import of line 202" ro="False" address="192.0.2.100" netmask="255.255.255.255"/>
<IPv4 id="id12" name="h-4.2.2.1" comment="Created during import of line 109" ro="False" address="4.2.2.1" netmask="255.255.255.255"/>
<IPv4 id="id13" name="h-10.1.1.20" comment="Created during import of line 111" ro="False" address="10.1.1.20" netmask="255.255.255.255"/>
<IPv4 id="id14" name="h-10.1.1.1" comment="Created during import of line 146" ro="False" address="10.1.1.1" netmask="255.255.255.255"/>
<IPv4 id="id15" name="h-192.0.2.10" comment="Created during import of line 146" ro="False" address="192.0.2.10" netmask="255.255.255.255"/>
<IPv4 id="id16" name="h-10.1.1.16" comment="Created during import of line 151" ro="False" address="10.1.1.16" netmask="255.255.255.255"/>
<IPv4 id="id17" name="h-10.0.0.100" comment="Created during import of line 152" ro="False" address="10.0.0.100" netmask="255.255.255.255"/>
<IPv4 id="id18" name="h-10.1.1.100" comment="Created during import of line 152" ro="False" address="10.1.1.100" netmask="255.255.255.255"/>
<IPv4 id="id19" name="h-10.1.1.111" comment="Created during import of line 153" ro="False" address="10.1.1.111" netmask="255.255.255.255"/>
<IPv4 id="id20" name="h-10.5.80.200" comment="Created during import of line 155" ro="False" address="10.5.80.200" netmask="255.255.255.255"/>
<IPv4 id="id21" name="h-10.10.1.200" comment="Created during import of line 155" ro="False" address="10.10.1.200" netmask="255.255.255.255"/>
<IPv4 id="id22" name="h-192.0.2.15" comment="Created during import of line 161" ro="False" address="192.0.2.15" netmask="255.255.255.255"/>
<IPv4 id="id23" name="h-192.0.2.100" comment="Created during import of line 209" ro="False" address="192.0.2.100" netmask="255.255.255.255"/>
</ObjectGroup>
<ObjectGroup id="id21" name="DNS Names" comment="" ro="False"/>
<ObjectGroup id="id22" name="Address Tables" comment="" ro="False"/>
<ObjectGroup id="id23" name="Groups" comment="" ro="False">
<ObjectGroup id="id24" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False">
<ObjectGroup id="id24" name="DNS Names" comment="" ro="False"/>
<ObjectGroup id="id25" name="Address Tables" comment="" ro="False"/>
<ObjectGroup id="id26" name="Groups" comment="" ro="False">
<ObjectGroup id="id27" name="outside.id12051X6282.src.net.0" comment="Created during import of line 71" ro="False">
<ObjectRef ref="id3"/>
<ObjectRef ref="id4"/>
</ObjectGroup>
<ObjectGroup id="id27" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False">
<ObjectGroup id="id30" name="outside.id12051X6282.src.net.1" comment="Created during import of line 74" ro="False">
<ObjectRef ref="id5"/>
<ObjectRef ref="id6"/>
<ObjectRef ref="id7"/>
<ObjectRef ref="id8"/>
</ObjectGroup>
<ObjectGroup id="id32" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False">
<ObjectGroup id="id35" name="outside.id12051X6282.src.net.2" comment="Created during import of line 79" ro="False">
<ObjectRef ref="id9"/>
<ObjectRef ref="id10"/>
</ObjectGroup>
<ObjectGroup id="id35" name="network-zone-inside" comment="Created during import of line 83" ro="False">
<ObjectRef ref="id41"/>
<ObjectGroup id="id38" name="network-zone-inside" comment="Created during import of line 83" ro="False">
<ObjectRef ref="id44"/>
</ObjectGroup>
<ObjectGroup id="id37" name="network-zone-dmz20" comment="Created during import of line 85" ro="False">
<ObjectRef ref="id42"/>
<ObjectGroup id="id40" name="network-zone-dmz20" comment="Created during import of line 85" ro="False">
<ObjectRef ref="id45"/>
</ObjectGroup>
</ObjectGroup>
<ObjectGroup id="id39" name="Hosts" comment="" ro="False"/>
<ObjectGroup id="id40" name="Networks" comment="" ro="False">
<Network id="id41" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/>
<Network id="id42" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/>
<Network id="id43" name="net-192.0.2.128/255.255.255.240" comment="Created during import of line 141" ro="False" address="192.0.2.128" netmask="255.255.255.240"/>
<Network id="id44" name="net-10.0.0.128/255.255.255.240" comment="Created during import of line 141" ro="False" address="10.0.0.128" netmask="255.255.255.240"/>
<Network id="id45" name="net-10.1.1.32/255.255.255.240" comment="Created during import of line 142" ro="False" address="10.1.1.32" netmask="255.255.255.240"/>
<Network id="id46" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 145" ro="False" address="10.0.0.16" netmask="255.255.255.240"/>
<Network id="id47" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 148" ro="False" address="10.5.80.16" netmask="255.255.255.240"/>
<Network id="id48" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 201" ro="False" address="10.1.2.0" netmask="255.255.255.0"/>
<ObjectGroup id="id42" name="Hosts" comment="" ro="False"/>
<ObjectGroup id="id43" name="Networks" comment="" ro="False">
<Network id="id44" name="net-10.1.1.0/255.255.255.0" comment="Created during import of line 84" ro="False" address="10.1.1.0" netmask="255.255.255.0"/>
<Network id="id45" name="net-10.0.0.0/255.255.255.0" comment="Created during import of line 86" ro="False" address="10.0.0.0" netmask="255.255.255.0"/>
<Network id="id46" name="net-192.0.2.128/255.255.255.240" comment="Created during import of line 146" ro="False" address="192.0.2.128" netmask="255.255.255.240"/>
<Network id="id47" name="net-10.0.0.128/255.255.255.240" comment="Created during import of line 146" ro="False" address="10.0.0.128" netmask="255.255.255.240"/>
<Network id="id48" name="net-10.1.1.32/255.255.255.240" comment="Created during import of line 147" ro="False" address="10.1.1.32" netmask="255.255.255.240"/>
<Network id="id49" name="net-10.0.0.16/255.255.255.240" comment="Created during import of line 151" ro="False" address="10.0.0.16" netmask="255.255.255.240"/>
<Network id="id50" name="net-10.5.80.16/255.255.255.240" comment="Created during import of line 154" ro="False" address="10.5.80.16" netmask="255.255.255.240"/>
<Network id="id51" name="net-10.1.2.0/255.255.255.0" comment="Created during import of line 208" ro="False" address="10.1.2.0" netmask="255.255.255.0"/>
</ObjectGroup>
<ObjectGroup id="id49" name="Address Ranges" comment="" ro="False">
<AddressRange id="id50" name="range-192.0.2.11-192.0.2.15" comment="Created during import of line 141" ro="False" start_address="192.0.2.11" end_address="192.0.2.15"/>
<ObjectGroup id="id52" name="Address Ranges" comment="" ro="False">
<AddressRange id="id53" name="range-192.0.2.11-192.0.2.15" comment="Created during import of line 146" ro="False" start_address="192.0.2.11" end_address="192.0.2.15"/>
</ObjectGroup>
</ObjectGroup>
<ServiceGroup id="id51" name="Services" comment="" ro="False">
<ServiceGroup id="id52" name="Groups" comment="" ro="False"/>
<ServiceGroup id="id53" name="ICMP" comment="" ro="False"/>
<ServiceGroup id="id54" name="IP" comment="" ro="False">
<IPService id="id55" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/>
<ServiceGroup id="id54" name="Services" comment="" ro="False">
<ServiceGroup id="id55" name="Groups" comment="" ro="False"/>
<ServiceGroup id="id56" name="ICMP" comment="" ro="False"/>
<ServiceGroup id="id57" name="IP" comment="" ro="False">
<IPService id="id58" any_opt="False" dscp="" fragm="False" lsrr="False" protocol_num="0" rr="False" rtralt="False" rtralt_value="False" short_fragm="False" ssrr="False" tos="" ts="False" name="ip" comment="Created during import of line 89" ro="False"/>
</ServiceGroup>
<ServiceGroup id="id56" name="TCP" comment="" ro="False">
<TCPService id="id57" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id58" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/>
<TCPService id="id59" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 148" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/>
<TCPService id="id60" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 151" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id61" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 22:22" comment="Created during import of line 200" ro="False" src_range_start="0" src_range_end="0" dst_range_start="22" dst_range_end="22"/>
<ServiceGroup id="id59" name="TCP" comment="" ro="False">
<TCPService id="id60" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 80:80 / 0:0" comment="Created during import of line 106" ro="False" src_range_start="80" src_range_end="80" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id61" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 80:80" comment="Created during import of line 109" ro="False" src_range_start="0" src_range_end="0" dst_range_start="80" dst_range_end="80"/>
<TCPService id="id62" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 8080:8080" comment="Created during import of line 154" ro="False" src_range_start="0" src_range_end="0" dst_range_start="8080" dst_range_end="8080"/>
<TCPService id="id63" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 0:0" comment="Created during import of line 157" ro="False" src_range_start="0" src_range_end="0" dst_range_start="0" dst_range_end="0"/>
<TCPService id="id64" ack_flag="False" ack_flag_mask="False" established="False" fin_flag="False" fin_flag_mask="False" psh_flag="False" psh_flag_mask="False" rst_flag="False" rst_flag_mask="False" syn_flag="False" syn_flag_mask="False" urg_flag="False" urg_flag_mask="False" name="tcp 0:0 / 22:22" comment="Created during import of line 207" ro="False" src_range_start="0" src_range_end="0" dst_range_start="22" dst_range_end="22"/>
</ServiceGroup>
<ServiceGroup id="id62" name="UDP" comment="" ro="False">
<UDPService id="id63" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/>
<ServiceGroup id="id65" name="UDP" comment="" ro="False">
<UDPService id="id66" name="udp 0:0 / 53:53" comment="Created during import of line 93" ro="False" src_range_start="0" src_range_end="0" dst_range_start="53" dst_range_end="53"/>
</ServiceGroup>
<ServiceGroup id="id64" name="Users" comment="" ro="False"/>
<ServiceGroup id="id65" name="Custom" comment="" ro="False"/>
<ServiceGroup id="id66" name="TagServices" comment="" ro="False"/>
<ServiceGroup id="id67" name="Users" comment="" ro="False"/>
<ServiceGroup id="id68" name="Custom" comment="" ro="False"/>
<ServiceGroup id="id69" name="TagServices" comment="" ro="False"/>
</ServiceGroup>
<ObjectGroup id="id67" name="Firewalls" comment="" ro="False">
<Firewall id="id68" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False">
<NAT id="id276" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id279" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 134">
<ObjectGroup id="id70" name="Firewalls" comment="" ro="False">
<Firewall id="id71" host_OS="pix_os" lastCompiled="0" lastInstalled="0" lastModified="0" platform="pix" version="7.0" name="pix1" comment="Created during import of line 6" ro="False">
<NAT id="id279" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id282" disabled="False" group="" position="0" action="Translate" comment="Created during import of line 139">
<OSrc neg="False">
<ObjectRef ref="id41"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id589"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id297" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id13"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id315" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id50"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id333" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id43"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id351" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 141">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id44"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id630"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
@@ -641,154 +536,262 @@
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id592"/>
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id369" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 142">
<NATRule id="id300" disabled="False" group="" position="1" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id13"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id387" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id50"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id405" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id43"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id589"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id423" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 142">
<OSrc neg="False">
<ObjectRef ref="id45"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id44"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id595"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id592"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id441" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 145">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id46"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id15"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id592"/>
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id459" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 146">
<NATRule id="id318" disabled="False" group="" position="2" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id53"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id336" disabled="False" group="" position="3" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id46"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id354" disabled="False" group="" position="4" action="Translate" comment="Created during import of line 146">
<OSrc neg="False">
<ObjectRef ref="id14"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id47"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id633"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id372" disabled="False" group="" position="5" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id15"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id390" disabled="False" group="" position="6" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id53"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id408" disabled="False" group="" position="7" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id46"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id426" disabled="False" group="" position="8" action="Translate" comment="Created during import of line 147">
<OSrc neg="False">
<ObjectRef ref="id48"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="sysid0"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id47"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id633"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id444" disabled="False" group="" position="9" action="Translate" comment="Created during import of line 149">
<OSrc neg="False">
<ObjectRef ref="id44"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id12"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="id630"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="sysid0"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id636"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id630"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id462" disabled="False" group="" position="10" action="Translate" comment="Created during import of line 151">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id15"/>
<ObjectRef ref="id49"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
@@ -803,76 +806,49 @@
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id592"/>
<ObjectRef ref="id633"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id477" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 147">
<NATRule id="id480" disabled="False" group="" position="11" action="Translate" comment="Created during import of line 152">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id592"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id17"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id592"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id495" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 148">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id47"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id14"/>
<ObjectRef ref="id18"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id59"/>
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id633"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id513" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 149">
<NATRule id="id498" disabled="False" group="" position="12" action="Translate" comment="Created during import of line 153">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id18"/>
<ObjectRef ref="id633"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
<ServiceRef ref="sysid1"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
@@ -881,79 +857,135 @@
<ObjectRef ref="id19"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id59"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id531" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 151">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id60"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id549" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 152">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id60"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id567" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 153">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id589"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id633"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id516" disabled="False" group="" position="13" action="Translate" comment="Created during import of line 154">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id50"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id16"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id62"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id534" disabled="False" group="" position="14" action="Translate" comment="Created during import of line 155">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id20"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id21"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id62"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id552" disabled="False" group="" position="15" action="Translate" comment="Created during import of line 157">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id63"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id571" disabled="False" group="" position="16" action="Translate" comment="Created during import of line 158">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
<ServiceRef ref="id61"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id11"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="id63"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id590" disabled="False" group="" position="17" action="Translate" comment="Created during import of line 159">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id630"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id60"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
@@ -965,28 +997,55 @@
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<NATRule id="id608" disabled="False" group="" position="18" action="Translate" comment="Created during import of line 161">
<OSrc neg="False">
<ObjectRef ref="id12"/>
</OSrc>
<ODst neg="False">
<ObjectRef ref="id22"/>
</ODst>
<OSrv neg="False">
<ServiceRef ref="id58"/>
</OSrv>
<TSrc neg="False">
<ObjectRef ref="sysid0"/>
</TSrc>
<TDst neg="False">
<ObjectRef ref="id13"/>
</TDst>
<TSrv neg="False">
<ServiceRef ref="sysid1"/>
</TSrv>
<ItfInb neg="False">
<ObjectRef ref="id630"/>
</ItfInb>
<ItfOutb neg="False">
<ObjectRef ref="id636"/>
</ItfOutb>
<NATRuleOptions/>
</NATRule>
<RuleSetOptions/>
</NAT>
<Policy id="id70" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id72" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside&#10;Created during import of line 202">
<Policy id="id73" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id75" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="Imported from ssh_commands_outside&#10;Created during import of line 209">
<Src neg="False">
<ObjectRef ref="id20"/>
<ObjectRef ref="id23"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id68"/>
<ObjectRef ref="id71"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id61"/>
<ServiceRef ref="id64"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -995,18 +1054,18 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id84" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 200">
<PolicyRule id="id87" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 207">
<Src neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="id44"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id68"/>
<ObjectRef ref="id71"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id61"/>
<ServiceRef ref="id64"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1015,18 +1074,18 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id96" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 201">
<PolicyRule id="id99" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="Imported from ssh_commands_inside&#10;Created during import of line 208">
<Src neg="False">
<ObjectRef ref="id48"/>
<ObjectRef ref="id51"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id68"/>
<ObjectRef ref="id71"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id61"/>
<ServiceRef ref="id64"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1035,28 +1094,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id108" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 98">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id24"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id120" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 99">
<PolicyRule id="id111" disabled="False" group="" log="True" position="3" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 98">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@@ -1064,10 +1102,10 @@
<ObjectRef ref="id27"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1077,18 +1115,18 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id132" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 100">
<PolicyRule id="id123" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 99">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id32"/>
<ObjectRef ref="id30"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1098,18 +1136,39 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id144" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 101">
<PolicyRule id="id135" disabled="False" group="" log="True" position="5" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 100">
<Src neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="sysid0"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id35"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id147" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 101">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1118,7 +1177,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id156" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 102">
<PolicyRule id="id159" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from inside_in&#10;Created during import of line 102">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@@ -1126,10 +1185,10 @@
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1139,39 +1198,18 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id168" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 93">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id41"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id63"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id180" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 94">
<PolicyRule id="id171" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 93">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="id44"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id63"/>
<ServiceRef ref="id66"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1181,18 +1219,18 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id192" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 95">
<PolicyRule id="id183" disabled="False" group="" log="True" position="9" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 94">
<Src neg="False">
<ObjectRef ref="id32"/>
<ObjectRef ref="id30"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="id44"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id63"/>
<ServiceRef ref="id66"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1202,18 +1240,39 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id204" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 96">
<PolicyRule id="id195" disabled="False" group="" log="True" position="10" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 95">
<Src neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="id35"/>
</Src>
<Dst neg="False">
<ObjectRef ref="id44"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id66"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id207" disabled="False" group="" log="False" position="11" action="Accept" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 96">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1222,7 +1281,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id216" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 97">
<PolicyRule id="id219" disabled="False" group="" log="True" position="12" action="Deny" direction="Outbound" comment="Imported from inside_out&#10;Created during import of line 97">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@@ -1230,10 +1289,10 @@
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id595"/>
<ObjectRef ref="id636"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1243,28 +1302,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id228" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 89">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id240" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 90">
<PolicyRule id="id231" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 89">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@@ -1272,10 +1310,10 @@
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1285,18 +1323,18 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id252" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 91">
<PolicyRule id="id243" disabled="False" group="" log="True" position="14" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 90">
<Src neg="False">
<ObjectRef ref="id32"/>
<ObjectRef ref="id30"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1306,18 +1344,39 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id264" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 92">
<PolicyRule id="id255" disabled="False" group="" log="True" position="15" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 91">
<Src neg="False">
<ObjectRef ref="id41"/>
<ObjectRef ref="id35"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id55"/>
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id589"/>
<ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="log_level">warning</Option>
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id267" disabled="False" group="" log="True" position="16" action="Deny" direction="Inbound" comment="Imported from outside_in&#10;Created during import of line 92">
<Src neg="False">
<ObjectRef ref="id44"/>
</Src>
<Dst neg="False">
<ObjectRef ref="sysid0"/>
</Dst>
<Srv neg="False">
<ServiceRef ref="id58"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id630"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@@ -1329,28 +1388,28 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Routing id="id585" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<Routing id="id626" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/>
</Routing>
<Interface id="id587" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False">
<Interface id="id628" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="Ethernet0" comment="Created during import of line 16" ro="False">
<InterfaceOptions/>
<Interface id="id589" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False">
<IPv4 id="id591" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/>
<Interface id="id630" dedicated_failover="False" dyn="False" label="outside" security_level="0" unnum="False" unprotected="False" name="Ethernet0.101" comment="Created during import of line 21" ro="False">
<IPv4 id="id632" name="pix1:Ethernet0.101:ip" comment="Created during import of line 24" ro="False" address="192.0.2.253" netmask="255.255.255.0"/>
<InterfaceOptions>
<Option name="type">8021q</Option>
<Option name="vlan_id">101</Option>
</InterfaceOptions>
</Interface>
<Interface id="id592" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False">
<IPv4 id="id594" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/>
<Interface id="id633" dedicated_failover="False" dyn="False" label="dmz20" security_level="20" unnum="False" unprotected="False" name="Ethernet0.102" comment="Created during import of line 27" ro="False">
<IPv4 id="id635" name="pix1:Ethernet0.102:ip" comment="Created during import of line 30" ro="False" address="10.0.0.253" netmask="255.255.255.0"/>
<InterfaceOptions>
<Option name="type">8021q</Option>
<Option name="vlan_id">102</Option>
</InterfaceOptions>
</Interface>
</Interface>
<Interface id="id595" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False">
<IPv4 id="id596" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/>
<Interface id="id636" dedicated_failover="False" dyn="False" label="inside" security_level="100" unnum="False" unprotected="False" name="Ethernet1" comment="Created during import of line 33" ro="False">
<IPv4 id="id637" name="pix1:Ethernet1:ip" comment="Created during import of line 37" ro="False" address="10.1.1.206" netmask="255.255.255.0"/>
<InterfaceOptions/>
</Interface>
<FirewallOptions>
@@ -1371,7 +1430,7 @@
</FirewallOptions>
</Firewall>
</ObjectGroup>
<ObjectGroup id="id598" name="Clusters" comment="" ro="False"/>
<IntervalGroup id="id599" name="Time" comment="" ro="False"/>
<ObjectGroup id="id639" name="Clusters" comment="" ro="False"/>
<IntervalGroup id="id640" name="Time" comment="" ro="False"/>
</Library>
</FWObjectDatabase>
src/unit_tests/PIXImporterTest/test_data/pix7-nat.output
+26 -22
View File
@@ -49,28 +49,32 @@ Warning: interface Ethernet6 was not imported because it is in "shutdown" mode
102: access list rule, action deny
104: access list rule, action permit
106: access list rule, action permit
133: Global address pool: number 1, interface outside, address range interface-interface, netmask 255.255.255.255
134: Source translation rule ("nat" command)
136: Global address pool: number 2, interface outside, address range 192.0.2.10-192.0.2.10, netmask 255.255.255.255
137: Global address pool: number 2, interface outside, address range 192.0.2.11-192.0.2.15, netmask 255.255.255.255
138: Global address pool: number 2, interface outside, address range 192.0.2.128-192.0.2.128, netmask 255.255.255.240
139: Global address pool: number 2, interface dmz20, address range 10.0.0.128-10.0.0.128, netmask 255.255.255.240
141: Source translation rule ("nat" command)
142: Source translation rule ("nat" command)
145: Destination translation rule ("static" command)
146: Destination translation rule ("static" command)
147: Destination translation rule ("static" command)
148: Destination translation rule ("static" command)
149: Destination translation rule ("static" command)
109: access list rule, action permit
111: access list rule, action permit
138: Global address pool: number 1, interface outside, address range interface-interface, netmask 255.255.255.255
139: Source translation rule ("nat" command)
141: Global address pool: number 2, interface outside, address range 192.0.2.10-192.0.2.10, netmask 255.255.255.255
142: Global address pool: number 2, interface outside, address range 192.0.2.11-192.0.2.15, netmask 255.255.255.255
143: Global address pool: number 2, interface outside, address range 192.0.2.128-192.0.2.128, netmask 255.255.255.240
144: Global address pool: number 2, interface dmz20, address range 10.0.0.128-10.0.0.128, netmask 255.255.255.240
146: Source translation rule ("nat" command)
147: Source translation rule ("nat" command)
149: Source translation rule ("nat" command)
151: Destination translation rule ("static" command)
152: Destination translation rule ("static" command)
153: Destination translation rule ("static" command)
157: Interface Ethernet0.101 ruleset outside_in direction 'in'
158: Interface Ethernet1 ruleset inside_in direction 'in'
159: Interface Ethernet1 ruleset inside_out direction 'out'
200: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
200: access list rule, action permit
201: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
201: access list rule, action permit
202: Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in'
202: access list rule, action permit
154: Destination translation rule ("static" command)
155: Destination translation rule ("static" command)
157: Destination translation rule ("static" command)
158: Destination translation rule ("static" command)
159: Destination translation rule ("static" command)
161: Destination translation rule ("static" command)
164: Interface Ethernet0.101 ruleset outside_in direction 'in'
165: Interface Ethernet1 ruleset inside_in direction 'in'
166: Interface Ethernet1 ruleset inside_out direction 'out'
207: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
207: access list rule, action permit
208: Interface Ethernet1 ruleset ssh_commands_inside direction 'in'
208: access list rule, action permit
209: Interface Ethernet0.101 ruleset ssh_commands_outside direction 'in'
209: access list rule, action permit
src/unit_tests/PIXImporterTest/test_data/pix7-nat.test
+7
View File
@@ -105,6 +105,11 @@ access-list id12251X6282.0 extended permit ip 10.1.1.0 255.255.255.0 any
access-list id12594X2458.0 permit tcp host 10.1.1.43 eq www any
! example from cisco docs, see also nat command below
access-list WEB permit tcp 10.1.1.0 255.255.255.0 4.2.2.1 255.255.255.255 eq 80
access-list NET1 permit ip host 10.1.1.20 host 4.2.2.1
pager lines 24
logging enable
logging emblem
@@ -141,6 +146,7 @@ global (dmz20) 2 10.0.0.128 netmask 255.255.255.240
nat (inside) 2 10.1.1.1 255.255.255.255
nat (inside) 2 10.1.1.32 255.255.255.240
nat (inside) 1 access-list WEB
static (inside,dmz20) 10.0.0.16 10.1.1.16 netmask 255.255.255.240
static (inside,dmz20) 10.0.0.100 10.1.1.100 netmask 255.255.255.255
@@ -152,6 +158,7 @@ static (inside,outside) tcp interface www access-list id12594X2458.0 0 0
static (inside,outside) tcp interface 80 access-list id12594X2458.0 0 0
static (inside,outside) interface access-list id12594X2458.0 0 0
static (inside,outside) 192.0.2.15 access-list NET1
access-group outside_in in interface outside