Changeset 47909 in vbox for trunk/doc/manual/en_US
- Timestamp:
- Aug 20, 2013 1:06:54 PM (11 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/doc/manual/en_US/user_Networking.xml
r47901 r47909 407 407 408 408 <sect1 id="network_nat_service"> 409 <title>Network Address Translation (NAT)Service (experimental)</title>409 <title>Network Address Translation Service (experimental)</title> 410 410 411 <para>NAT service provides router functionality similar to home network 412 configuration, hiding each member from direct outer access, but let establish 413 communication to from internal network to LAN and WAN resources over TCP and UDP 414 (IPv4 and IPv6).</para> 415 416 <para>NAT service attached to internal network and guests supposed to get natted 417 connection should be attached to the same internal network. Name of internal network 418 selected during creation (it doesn't metter whether network exists or not). 411 <para>The Network Address Translation (NAT) service works in a similar way 412 to a home router, grouping the systems using it into a network and 413 preventing systems outside of this network from directly accessing systems 414 inside it, but letting systems inside communicate with each other and with 415 systems outside using TCP and UDP over IPv4 and IPv6.</para> 416 417 <para>A NAT service is attached to an internal network and virtual machines 418 which are to make use of it should be attached to that internal network. 419 The name of internal network is chosen when the NAT service is created and 420 the internal network will be created if it does not already exist. An 421 example command to create a NAT network is: 419 422 </para> 420 423 <para><screen>VBoxManage natnetwork add -t nat-int-network -n "192.168.15.0/24" -e 421 </screen> 422 "-t nat-int-network" points to name of internal network, that should be pointed while VM 423 network attachment configuration, -n "192.168.15.0/24" - sets network id and mask, of NAT 424 service interface, by default in static configuration gateway should assigned to 192.168.15.1 425 (networkid +1, note after release it could be changed). It's possible to attach DHCP server, 426 to the internal network, it could be done while creation: 427 <screen>VBoxManage natnetwork add -t nat-int-network -n "192.168.15.0/24" -e -h on</screen> or 428 in modification: 429 <screen>VBoxManage natnetwork modify -t nat-int-network -h on</screen> -h on|off, enable or 430 disable DHCP server. 431 </para> 432 <para>Note: current limitation of DHCP server it doesn't provide nameserver information, so 433 guest should be explicitly configured to use right DNS servers.</para> 434 <para>To start NAT service, following command should be executed:<screen> 435 VBoxManage natnetwork start -t nat-int-network</screen> note if network configured with DHCP server 436 it will start together with NAT network service.</para> 437 <para><screen>VBoxManage natnetwork start -t nat-int-network</screen> Stops, NAT network service, 438 together with DHCP server, if one's enabled. 439 </para> 440 <para>To delete NAT network service:<screen>VBoxManage natnetwork remove -t nat-int-network</screen> 441 Note: this command doesn't remove DHCP server, if one is enabled on the network.</para> 442 <para>Port-forwarding, is supported (controlled via -p for IPv4 and -P for IPv6):<screen> 443 VBoxManage natnetwork modify -t nat-int-network -p "ssh:tcp:[]:10022:[192.168.15.15]:22" 444 </screen> this adds port-forwarding rule from host's TCP 10022 port to guest with IP 445 192.168.15.15 on port 22, and to delete rule <screen> 446 VBoxManage natnetwork modify -t nat-int-network -p delete ssh</screen></para> 447 <para>To get the list of registered natnetworks: 448 <screen>VBoxManage list natnetworks</screen></para> 424 </screen></para> 425 <para> 426 Here, "nat-int-network" is the name of the internal network to be used and 427 "192.168.15.0/24" is the network address and mask of the NAT service 428 interface. By default in this static configuration the gateway will be 429 assigned the address 192.168.15.1 (the address following the interface 430 address), though this is subject to change. To attach a DHCP server to the 431 internal network, we modify the example as follows:</para> 432 <para><screen>VBoxManage natnetwork add -t nat-int-network -n "192.168.15.0/24" -e -h on</screen></para> 433 <para> or to add a DHCP server to the network after creation:</para> 434 <para><screen>VBoxManage natnetwork modify -t nat-int-network -h on</screen></para> 435 <para>To disable it again, use:</para> 436 <para><screen>VBoxManage natnetwork modify -t nat-int-network -h off</screen></para> 437 <para>A current limitation of the DHCP server is that it does not provide 438 nameserver information, so systems using it should be explicitly configured 439 to use the right DNS servers.</para> 440 <para>To start the NAT service, use the following command:</para> 441 <para><screen>VBoxManage natnetwork start -t nat-int-network</screen></para> 442 <para>If the network has a DHCP server attached then it will start together 443 with the NAT network service.</para> 444 <para><screen>VBoxManage natnetwork stop -t nat-int-network</screen> stops 445 the NAT network service, together with DHCP server if any.</para> 446 <para>To delete the NAT network service use:</para> 447 <para><screen>VBoxManage natnetwork remove -t nat-int-network</screen></para> 448 <para>This command does not remove the DHCP server if one is enabled on the 449 internal network.</para> 450 <para>Port-forwarding is supported (using the "-p" switch for IPv4 and "-P" 451 for IPv6):</para> 452 <para><screen>VBoxManage natnetwork modify -t nat-int-network -p "ssh:tcp:[]:10022:[192.168.15.15]:22"</screen></para> 453 <para>This adds a port-forwarding rule from the host's TCP 10022 port to 454 the port 22 on the guest with IP address 192.168.15.15. To delete the rule, 455 use:</para> 456 <para><screen>VBoxManage natnetwork modify -t nat-int-network -p delete ssh</screen></para> 457 <para>To see the list of registered NAT networks, use:</para> 458 <para><screen>VBoxManage list natnetworks</screen></para> 449 459 </sect1> 450 460
Note:
See TracChangeset
for help on using the changeset viewer.