Digi IX20, Руководство пользователя

Страница: 227 / 726

Routing IP routing
IX20 User Guide 227

Command line
1. Log into the IX20 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create new firewall zones:
a. Create a firewall zone named CellularWAN with Source NAT enabled:
i. Create the firewall zone:
(config)> add firewall zone CellularWAN
(config firewall zone CellularWAN)>
ii. Enable Source NAT on the new zone:
(config firewall zone CellularWAN)> src_nat true
(config firewall zone CellularWAN)>
b. Create second firewall zone named EthernetWAN with Source NAT enabled:
i. Type .. to move back one node in the configuration:
(config firewall zone CellularWAN)> ..
(config firewall zone)>
ii. Create the firewall zone:
(config firewall zone)> add EthernetWAN
(config firewall zone EthernetWAN)>
ii. Enable Source NAT on the new zone:
(config firewall zone EthernetWAN)> src_nat true
(config firewall zone EthernetWAN)>
4. Configure the WAN interfaces to use the new zones:
a. Set the zone for the cellular WAN interface:
i. Type ... to move to the root of the configuration:
(config firewall zone EthernetWAN)> ...
(config)>