Digi Connect IT 16, Руководство пользователя

Страница: 561 / 756

Firewall Port forwarding rules
Digi Connect IT® 16/48 User Guide 561
9. Set the public-facing port number that network connections must use for their traffic to be
forwarded.
(config firewall dnat 0)> to_port port
(config firewall dnat 0)>
10. (Optional) To create a white list of devices that are authorized to leverage this forwarding rule,
based on either the IP address or firewall zone, change to the acl node:
(config firewall dnat 0)> acl
(config firewall dnat 0 acl)>
n
To white list an IP address:
l
For IPv4 addresses:
(config firewall dnat 0 acl> add address end ip-address
(config firewall dnat 0 acl)>
l
For IPv6 addresses:
(config firewall dnat 0 acl> add address6 end ip-address
(config firewall dnat 0 acl)>
Repeat for each appropriate IP address.
n
To specify the firewall zone for white listing:
(config firewall dnat 0 acl)> add zone end zone
Repeat for each appropriate zone.
To view a list of available zones:
(config firewall dnat 0 acl)> .. .. .. zone ?
Zones: A list of groups of network interfaces that can be referred to
by packet filtering rules
and access control lists.
Additional Configuration
---------------------------------------------------------------------
---------
any
dynamic_routes
edge
external
internal
ipsec
loopback
setup
(config firewall dnat 0 acl)>