Digi Connect EZ 4 User Manual page 721

Firewall
a. Use the ? to determine available interfaces:
b. Set the interface. For example:
(config firewall dnat 0)> interface eth1
(config firewall dnat 0)>
5. Set the IP version. Allowed values are ipv4 and ipv6. The default is ipv4.
(config firewall dnat 0)> ip_version ipv6
(config firewall dnat 0)>
6. Set the public-facing port number that network connections must use for their traffic to be
forwarded.
(config firewall dnat 0)> port port
(config firewall dnat 0)>
7. Set the type of internet protocol .
(config firewall dnat 0)> protocol value
(config firewall dnat 0)>
Network connections will only be forwarded if they match the selected protocol. Allowed
values are custom, tcp, tcpudp, or upd. The default is tcp.
8. Set the IP address of the server to which traffic should be forwarded:
For IPv4 addresses:
n
(config firewall dnat 0)> to_address ip-address
(config firewall dnat 0)>
For IPv6 addresses:
n
(config firewall dnat 0)> to_address6 ip-address
(config firewall dnat 0)>
9. Set the public-facing port number(s) that network connections must use for their traffic to be
forwarded.
(config firewall dnat 0)> to_port value
(config firewall dnat 0)>
where value is the port number, comma-separated list of port numbers, or range of port
numbers on the server to which traffic should be forwarded. For example, to forward traffic to
ports one, three, and five through ten, enter 1, 3, 5-10.
10. (Optional) To create a white list of devices that are authorized to leverage this forwarding rule,
based on either the IP address or firewall zone, change to the acl node:
(config firewall dnat 0)> acl
(config firewall dnat 0 acl)>
Digi Connect EZ 4/4i User Guide
Port forwarding rules
721