D-Link DFL-1660 User Manual page 511

Network security firewall
Hide thumbs Also See for DFL-1660:
Table of Contents

Advertisement

10.1.10. More Pipe Examples
VoIP to the remote site is guaranteed 500 kbps of capacity before it is forced to best effort.
SAT with Pipes
If SAT is being used, for example with a web server or ftp server, that traffic also needs to be forced
into pipes or it will escape traffic shaping and ruin the planned quality of service. In addition, server
traffic is initiated from the outside so the order of pipes needs to be reversed: the forward pipe is the
in-pipe and the return pipe is the out-pipe.
A simple solution is to put a "catch-all-inbound" rule at the bottom of the pipe rule. However, the
external interface (wan) should be the source interface to avoid putting into pipes traffic that is
coming from the inside and going to the external IP address. This last rule will therefore be:
Rule
Name
all-in
Forward
Return
Source
Pipes
Pipes
Interface
in-pipe
out-pipe
wan
Note: SAT and ARPed IP Addresses
If the SAT is from an ARPed IP address, the wan interface needs to be the destination.
Source
Dest
Network
Interface
all-nets
core
511
Chapter 10. Traffic Management
Dest
Selected
Prece
Network
Service
dence
all-nets
All
0

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Dfl-2560Dfl-2560gDfl-260eDfl-860e

Table of Contents