Amer Networks E5Web GUI User Manual
Page 244

Device:/> add IPPolicy
SourceInterface=lan
SourceNetwork=lan_net
DestinationInterface=wan
DestinationNetwork=all-nets
Service=dns-all
SourceAction=NAT
Name=surf_dns
The Action in the above CLI definitions has not been specified. The default value is Allow.
InControl
Follow the same steps used for the Web Interface below.
Web Interface
Create policy for the http-all service:
1.
Go to: Policies > Add > IPPolicy
2.
Now enter:
•
Name: surf_http
•
Action: Allow
•
Source Interface: lan
•
Source Network: lan_net
•
Destination Interface: all
•
Destination Network: all-nets
•
Service: http-all
3.
Select Address Translation and in the dialog:
•
Under Source Address Translation enable NAT
•
Close the dialog
4.
Click OK
Repeat for the dns-all service:
1.
Go to: Policies > Add > IPPolicy
2.
Now enter:
•
Name: surf_dns
•
Action: Allow
•
Source Interface: lan
•
Source Network: lan_net
•
Destination Interface: all
Chapter 3: Fundamentals
244