# Copyright (C) 2009  Internet Systems Consortium, Inc. ("ISC")
#
# Permission to use, copy, modify, and/or distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
# AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.

# $Id: schema 418 2009-11-07 18:31:14Z pselkirk $

SRC1 - [F]AFTR - DST3
SRC2 -

SRC*/DST* Ubuntu 8.10 desktop
AFTR Fedora core 10
FAFTR FreeBSD 7.0

SRC1
 interface eth2 10.0.1.2/24 2001:0:0:1::2/64
 tunnel 10.0.100.2->10.0.100.1 encap 2001:0:0:1::2->2001::1
 10.0.0.0/8 via 10.0.100.1
 192.0.2.0/24 via 10.0.100.1
 198.18.0.0/15 via 10.0.100.1
 2001::/48 via 2001:0:0:1::1

SRC2
 interface eth2 10.0.2.2/24 2001:0:0:2::2/64
 tunnel 10.0.100.2->10.0.100.1 encap 2001:0:0:2::2->2001::1
 10.0.0.0/8 via 10.0.100.1
 192.0.2.0/24 via 10.0.100.1
 198.18.0.0/15 via 10.0.100.1
 2001::/48 via 2001:0:0:2::1

AFTR
 eth1 (to SRC1) 10.1.1.1/24 2001:0:0:1::1/64
 eth2 (to SRC2) 10.2.2.1/24 2001:0:0:2::1/64
 eth3 (to DST3) 192.0.2.1/24
 tunnel 10.0.100.1->10.0.100.2
 nat 198.18.200.1
 10.0.0.0/8 via tunnel
 198.18.0.0/15 via tunnel

DST3
 interface eth2 192.0.2.2/24
 10.0.0.0/8 via 192.0.2.1
 198.18.0.0/15 via 192.0.2.1

Static bindings

SRC1 TCP&UDP 10.0.1.2 port 5001 <- 198.18.200.2 port 5001
SRC2 TCP&UDP 10.0.2.2 port 5001 <- 198.18.200.2 port 5002

PRR/A+P (a+p confs)

No-NAT

NONAT 198.51.100.0/24
