PLANET MH-2300 - Manual (Page 330)

Gigabit Multi-Homing VPN Security Gateway
MH-2300
330
Traffic Quota per Source IP
„ It determines the quota of per source IP of a policy. (MBytes)
Traffic Quota per Day
„ It determines the total traffic amount of a session per day. (MBytes)
IP Redirection
„ There are three modes for WAN, LAN and DMZ:
‹ Automatic: Automatically transferring the source IP address to the
default IP address of MH-2300 device.
‹ Routing: Delivering the packets using its original source IP and
Destination IP.
‹ NAT: Transferring the Source IP address to the designated IP address
on the MH-2300 interface’s subnet.
Under Network > Interface, the NAT Redirection, which is available for WAN
interfaces, can be used for translating internal addresses into external
addresses, whereas the IP Redirection (when selected as “NAT” ) of a network
policy is to translate IP addresses from specific subnets.
Pause
„ When modifications are required on existing settings, such as Address and
QoS, you may temporarily disable the policy so as to modify the policy.
Priority
„ When accessing packets, MH-2300 inspects the packet to see if it is
identical with the criteria of existing policies. The packet-to-policy
inspection is performed by the priority of policies. Therefore, in order to
optimize the process, you may rearrange the priority of policies accordingly
by changing the figure in the drop-down list of each policy.
6.1.1
Example
Prerequisite Configuration
Port1 is defined as LAN1 (192.168.1.1, NAT/ Routing mode) and is connected
to the LAN: 192.168.1.X/24.
Port2 is defined as WAN1 (61.11.11.11) and is connected to the Internet via the
ADSL modem (ATUR). (IP range: 61.11.11.10 to 61.11.11.14)
Port3 is defined as WAN2 (211.22.22.22) and is connected to the Internet via
the ADSL modem (ATUR). (IP range: 211.22.22.18 to 211.22.22.30)
Port4 is defined as DMZ1.