4RF Aprisa LTE, Руководство пользователя

Страница: 140 / 248

140 | Aprisa LTE User Manual
Input, Output, Forward
Input / output define the traffic policies in the zone and forward defines the traffic policy between different
networks within the zone
Masquerading
If enabled, NAT function is applied
MSS clamping
Reduce the maximum segment size (MSS), that a device can receive in a single TCP segment/MTU (not
including TCP/IP header)
Ignore IPSec
When set, packets that are part of a VPN zone are ignored for this zone. Rules for the VPN zone itself will
instead apply to the received packet.
Is VPN
Indicates that the firewall zone is to apply to inner traffic going through an IPSec tunnel as opposed to the
traffic directly on and interface. When set, the covered networks option is replaced with a covered subnets
option.
Covered Networks
This allows selections of which interfaces this firewall zones rules are applied to. This is not used for VPN
tunnels.
Covered Subnets
This allows selection of which subnets, specified in CIDR notation (e.g. a.b.c.d/mask) are covered by this
firewall zone. This is only used for zones which are applied to VPN tunnels.