| Message ID | 20260309130546.7735-1-gert@greenie.muc.de |
|---|---|
| State | New |
| Headers | show |
| Series | [Openvpn-devel,v2] doc: fix client-nat syntax and examples | expand |
This is an easy one for in-between... no code changes, so nothing to
test, obviously-incorrect documentation beforehand, so quite useful to
have :-)
Your patch has been applied to the master, release/2.7 and release/2.6 branch.
commit 60986ae5337f2501d088f3a9c919799f9fce7355 (master)
commit 16646eb01adbbeff94e498a9d6589671602d7280 (release/2.7)
commit 0481d9374f6aa940002ad71eaea8f98c057fc491 (release/2.6)
Author: Ralf Lici
Date: Mon Mar 9 14:05:40 2026 +0100
doc: fix client-nat syntax and examples
Signed-off-by: Ralf Lici <ralf@mandelbit.com>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1560
Message-Id: <20260309130546.7735-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg35966.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
--
kind regards,
Gert Doering
diff --git a/doc/man-sections/client-options.rst b/doc/man-sections/client-options.rst index b9ae7ce..85d25e5 100644 --- a/doc/man-sections/client-options.rst +++ b/doc/man-sections/client-options.rst @@ -132,16 +132,21 @@ ifconfig settings pushed to the client would create an IP numbering conflict. + Valid syntax: + :: + + client-nat snat|dnat network netmask alias + Examples: :: - client-nat snat 192.168.0.0/255.255.0.0 - client-nat dnat 10.64.0.0/255.255.0.0 + client-nat snat 192.168.0.0 255.255.0.0 10.64.0.0 + client-nat dnat 10.64.0.0 255.255.0.0 192.168.0.0 - ``network/netmask`` (for example :code:`192.168.0.0/255.255.0.0`) defines - the local view of a resource from the client perspective, while - ``alias/netmask`` (for example :code:`10.64.0.0/255.255.0.0`) defines the - remote view from the server perspective. + ``network`` and ``netmask`` (for example :code:`192.168.0.0 + 255.255.0.0`) define the local view of a resource from the client + perspective, while ``alias`` (for example :code:`10.64.0.0`) defines the + remote view from the server perspective using the same netmask. Use :code:`snat` (source NAT) for resources owned by the client and :code:`dnat` (destination NAT) for remote resources.