D-Link NetDefend DFL-210 User Manual page 311

Network security firewall ver 2.26.01
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

7.4.2. Translation of Multiple IP
Addresses (M:N)
Now, create another object for the base of the web server IP addresses:
gw-world:/> add Address IP4Address wwwsrv_priv_base
Publish the public IP addresses on the wan interface using ARP publish. One ARP item is needed for every IP
address:
gw-world:/> add ARP Interface=wan IP=195.55.66.77 mode=Publish
Repeat this for all the five public IP addresses.
Next, change the current category to be the main IP rule set:
gw-world:/> cc IPRuleSet main
Next, create a SAT rule for the translation:
gw-world:/main> add IPRule Action=SAT Service=http
Finally, create an associated Allow Rule:
gw-world:/main> add IPRule Action=Allow Service=http
Web Interface
Create an address object for the public IP address:
1.
Go to Objects > Address Book > Add > IP address
2.
Specify a suitable name for the object, for example wwwsrv_pub
3.
Enter 195.55.66.77 - 195.55.66.77.81 as the IP Address
4.
Click OK
Now, create another address object for the base of the web server IP addresses:
1.
Go to Objects > Address Book > Add > IP address
2.
Specify a suitable name for the object, for example wwwsrv_priv_base
3.
Enter 10.10.10.5 as the IP Address
4.
Click OK
Publish the public addresses on the wan interface using ARP publish. One ARP item is needed for every IP
address:
1.
Go to Interfaces > ARP > Add > ARP
2.
Now enter:
Mode: Publish
Interface: wan
IP Address: 195.55.66.77
3.
Click OK and repeat for all 5 public IP addresses
Address=195.55.66.77-195.55.66.81
Address=10.10.10.5
SourceInterface=any
SourceNetwork=all-nets
DestinationInterface=wan
DestinationNetwork=wwwsrv_pub
SATTranslateToIP=wwwsrv_priv_base
SATTranslate=DestinationIP
SourceInterface=any
SourceNetwork=all-nets
DestinationInterface=wan
DestinationNetwork=wwwsrv_pub
311
Chapter 7. Address Translation

Advertisement

Table of Contents
loading

Table of Contents