Accelerated 6330-MX, Руководство пользователя

Страница: 115 / 140

Sample Configuration Sample Configuration
Open the configuration profile for the 6350-SR and make the following changes.
1. Under Firewall Firewall -> Zones Zones , add two new zones, one labelled modemwan modemwan , and another labelled
ethernet ethernetwan wan . Ensure the source NAT source NAT option is selected for both new zones.
2. Under Modem Modem , set the Zone Zone to modemwan modemwan .
3. Under Network -> Interfaces -> WAN Network -> Interfaces -> WAN , set the Zone Zone to ethernetwan ethernetwan .
4. Under Firewall Firewall -> Packet Packet filtering filtering , setup two rules rules to accomplish the following:
1. reject all other LAN packets on the cellular modem interface
2. allow LAN packets to go through the Ethernet WAN interface
5. Under Firewall Firewall -> Custom Rules Custom Rules , select the Enable Enable checkbox and add the following line to the
Rules Rules entry. If you would like to apply the same MAC-based policy route to multiple client
devices, copy the line below and replace the MAC address with the MAC address of the
desired device.
iptables -I FORWARD --match mac --mac-source 52:54:00:c2:a5:43 -m set --match-set zone-internal src,src -m set --match-set zone-modemwan dst,dst -j ACCEPT
Accelerated Notices
Page 115 Page 115 6330-MX / 6335-MX