Digi IX14, Руководство пользователя

Страница: 251 / 828

Firewall Port forwarding rules
IX14 User Guide 251
8. Set the IP address of the server to which traffic should be forwarded:
n
For IPv4 addresses:
(config firewall dnat 0)> to_address ip-address
(config firewall dnat 0)>
n
For IPv6 addresses:
(config firewall dnat 0)> to_address6 ip-address
(config firewall dnat 0)>
9. Set the public-facing port number(s) that network connections must use for their traffic to be
forwarded.
(config firewall dnat 0)> to_port value
(config firewall dnat 0)>
where value is the port number, comma-separated list of port numbers, or range of port
numbers on the server to which traffic should be forwarded. For example, to forward traffic to
ports one, three, and five through ten, enter
1, 3, 5-10 .
10. (Optional) To create a white list of devices that are authorized to leverage this forwarding rule,
based on either the IP address or firewall zone, change to the acl node:
(config firewall dnat 0)> acl
(config firewall dnat 0 acl)>
n
To white list an IP address:
l
For IPv4 addresses:
(config firewall dnat 0 acl> add address end ip-address
(config firewall dnat 0 acl)>
l
For IPv6 addresses:
(config firewall dnat 0 acl> add address6 end ip-address
(config firewall dnat 0 acl)>
Repeat for each appropriate IP address.
n
To specify the firewall zone for white listing:
(config firewall dnat 0 acl)> add zone end zone
Repeat for each appropriate zone.
To view a list of available zones:
(config firewall dnat 0 acl)> .. .. .. zone ?
Zones: A list of groups of network interfaces that can be referred
to by packet filtering rules
and access control lists.