Aruba Networks AirOS v2.3, User Manual

Page: 66 / 254

56 Aruba AirOS Part 0500036-02
v2.3 User Guide January 2005
4. Action Required The action that the
administrator wants the
switch to perform on a
packet that matches the
criteria provided above. This field can take one of the
following fields:
z
permit: Permits the traffic
matching this rule.
z
drop: Drops the packets match-
ing this rule without any notifi-
cation
z
reject: Drops the packet and
sends an ICMP notification to
the source of traffic.
z
src-nat: Does a NAT transla-
tion on the packets matching the
rule. When this option is
selected, the administrator also
needs to select a NAT pool. If
this pool is not configured, the
administrator needs to config-
ure a NAT pool by navigating to
the Configuration > Security >
Advanced > NAT Pools.
z
dst-nat: Selecting this option
redirects the traffic to the config-
ured IP address and destination
port. An example of this option
is to redirect all HTTP packets
to the captive portal port on the
Aruba WLAN Switch as used in
the pre-defined policy called
“captiveportal” .
z
redirect: This option is used to
redirect traffic into a GRE tun-
nel. This option is used prima-
rily to redirect all guest traffic
into a GRE tunnel to a DMZ
router/switch.