_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2018
GW2020 Series User Manual
Issue: 2.1
Page 273 of 423
Web: Source MAC address
UCI: firewall.<redirect label>.src_mac
Opt: list src_mac
Defines the list of source MAC addresses that this redirect will
match.
Format: aa:bb:cc:dd:ee:ff
Multiple RIP interfaces are entered using
uci set
and
uci
add_list
commands. Example:
uci set firewall.@redirect[0].src_mac=aa:bb:cc:dd:ee:ff
uci add_list
firewall.@redirect[0].src_mac=12:34:56:78:90:12
or using a list of options via package options
list network ‘aa:bb:cc:dd:ee:ff’
list network ‘12:34:56:78:90:12’
Web: Source IP address
UCI: firewall.<redirect label>.src_ip
Opt: src_ip
Defines a source IP address that this redirect will match.
Blank
Match traffic from any source IP.
Range
A.B.C.D/mask.
Web: Source port
UCI: firewall.<redirect label>.src_port
Opt: src_port
Defines a source IP port that this redirect will match. You can
enter multiple ports, using a space separator.
For example: option src_port ’22 23’
*see note below on use with options src_dport and dest_port
Blank
Match traffic from any source port.
Range
1 - 65535
Web: External port
UCI: firewall.<redirect label>.src_dport
Opt: src_dport
Specifies the incoming TCP/UDP port or port range to match. This
is the incoming destination port specified by the external host.
Port ranges specified in format start:stop, for example,
2001:2020.
You can enter multiple ports, using a space separator.
For example: option src_dport ’22 23’
*see note below on use with options src_port and dest_port
Blank
Match traffic to any port.
Range
1 – 65535
Web: Internal zone
UCI: firewall.<redirect label>.dest
Opt: dest
Specifies the traffic destination zone, must refer to one of the
defined zone names.
Web: Internal IP address
UCI: firewall.<redirect label>.dest_ip
Opt: dest_ip
Specifies the internal (LAN) IP address for the traffic to be
redirected to.
Web: Internal port
UCI: firewall.<redirect label>.dest_port
Opt: dest_port
Specifies the destination tcp/udp port for the redirect traffic. You
can enter multiple ports, using a space separator.
*For example: option dest_port ’22 23’
*See note below table on use with options src_port and
src_dport.
Web: Enable NAT Loopback
UCI: firewall.<redirect label>.reflection
Opt: reflection
Enable or disable NAT reflection for this redirect.
0
Reflection disabled.
1
Reflection enabled.
Web: Extra arguments
UCI: firewall.<redirect label>.extra
Opt: extra
Passes extra arguments to IP tables. This is useful to specify
additional match options, like -m policy --dir in for IPSec. The
arguments are entered as text strings.
Table 89: Information table for port forward edits fields
*Note: redirect rule options src_port and src_dport/dest_port accept space-separated
lists of ports. If src_port is a list, then src_dport/dst_port cannot be, to avoid ambiguity.
