D-Link DFL-500, Руководство пользователя

Страница: 33 / 140

You can also select Insert Policy before on a policy in the list to add the new policy above a specific
policy.
· Configure the policy.
Sample Ext to Int NAT mode policy
Source
An address that matches the source address of the packet. This can be a single IP address or an address
range. Before you can add this address to a policy, you must add it to the source interface. This address
must be a valid IP address for the network connected to the source interface. See
Adding addresses .
Destination
For an Ext to Int NAT mode policy, the destination is a virtual IP that maps the destination address of the
packet to a hidden destination address on the internal network.
For Int to Ext NAT mode policies, the destination is an address that matches the destination address of
the packet. This can be a single IP address or an address range. Before you can add this address to a
policy, you must add it to the destination interface. This address must be a valid IP address for the
network connected to the destination interface. See
Adding addresses .
Schedule
A schedule that controls when this policy is active. During the time that the schedule is valid the policy is
available to be matched with connections. See
Schedules .
Service
A service that matches the service (or port number) of the packet. You can select from a wide range of
predefined services, or add custom services and service groups. See
Services .
Action
Select how the firewall should respond when the policy matches a connection attempt. You can configure
the policy to accept the connection, deny the connection, or require users to authenticate with the firewall
before the firewall accepts the connection. Authentication is not available in Transparent mode. See
Users
and authentication for more information about authentication.
Reverse
NAT
For Ext to Int policies you can select Reverse NAT to have the policy perform reverse network address
translation on return packets.
Log Traffic
Optionally select Log Traffic to add messages to the traffic log whenever the policy processes a
connection.
Traffic
Shaping
Optionally select Traffic Shaping to control the bandwidth available to and set the priority of the traffic
processed by the policy. See
Traffic shaping .
·
Select OK to add the policy.
The policy is added to the selected policy list. You must arrange policies in the policy list so that they have the
results that you expect. See
Ordering policies in policy lists for more information.
DFL-500 User Manual
33