beautypg.com

Setting up transparent mode for scenario 2 – Amer Networks E5Web GUI User Manual

Page 350

background image

Example 4.21. Setting up Transparent Mode for Scenario 2

Configure a Switch Route over the lan and dmz interfaces for address range 10.0.0.0/24 (assume
the wan interface is already configured).

Command-Line Interface

Configure the lan interface:

Device:/> set Interface Ethernet lan

IP=10.0.0.1
Network=10.0.0.0/24
AutoSwitchRoute=No

Configure the dmz interface:

Device:/> set Interface Ethernet dmz

IP=10.0.0.2
Network=10.0.0.0/24
AutoSwitchRoute=No

Configure an interface group:

Device:/> add Interface InterfaceGroup transparent_group

Members=lan,dmz
Equivalent=No

Add a switch route in the main routing table for the group:

Device:/> cc RoutingTable main
Device:/main> add SwitchRoute

Interface=transparent_group
Network=10.0.0.0/24

Device:/main> cc
Device:/>

Add the IP rule for lan to dmz:

Device:/> add IPRule Action=Allow

Service=http
SourceInterface=lan
SourceNetwork=10.0.0.0/24
DestinationInterface=dmz
DestinationNetwork=10.1.4.10
Name=http_lan_to_dmz

Add a SAT IP rule for wan to dmz:

Device:/> add IPRule Action=SAT

Service=http
SourceInterface=wan
SourceNetwork=all-nets
DestinationInterface=dmz
DestinationNetwork=wan_ip
SATTranslate=DestinationIP
SATTranslateToIP=10.1.4.10
Name=http_wan_to_dmz_sat

Add the triggering IP rule for the SAT rule above:

Chapter 4: Routing

350

This manual is related to the following products: