Table of Contents
Advertisement
Routing
b. Create second firewall zone named EthernetWAN with Source NAT enabled:
i. Type .. to move back one node in the configuration:
(config firewall zone CellularWAN)> ..
(config firewall zone)>
ii. Create the firewall zone:
(config firewall zone)> add EthernetWAN
(config firewall zone EthernetWAN)>
i. Enable Source NAT on the new zone:
(config firewall zone EthernetWAN)> src_nat true
(config firewall zone EthernetWAN)>
4. Configure the WAN interfaces to use the new zones:
a. Set the zone for the cellular WAN interface:
i. Type ... to move to the root of the configuration:
(config firewall zone EthernetWAN)> ...
(config)>
ii. Set the zone:
(config)> network interface modem zone CellularWAN
(config)>
b. Set the zone for the Ethernet WAN interface:
(config)> network interface eth1 zone EthernetWAN
(config)>
5. Configure the policy-based route for traffic from the client device that will be sent over the
cellular WAN:
a. Add a new routing policy:
(config)> add network route policy end
(config network route policy 0)>
b. Set the label that will be used to identify this route policy:
(config network route policy 0)> label "VoIP phone"
(config network route policy 0)>
c. Set the interface:
(config network route policy 0)> interface /network/interface/modem
(config network route policy 0)>
IX20 User Guide
IP routing
441
Advertisement
Table of Contents
