D-Link DFL-260E User Manual page 355

Network security firewall netdefendos version 2.27.03
Hide thumbs Also See for DFL-260E:
Table of Contents

Advertisement

7.4.2. Translation of Multiple IP
Addresses (M:N)
Publish the public IP addresses on the wan interface using ARP publish. One ARP item is needed for every IP
address:
gw-world:/> add ARP Interface=wan IP=195.55.66.77 mode=Publish
Repeat this for all the five public IP addresses.
Next, change the current category to be the main IP rule set:
gw-world:/> cc IPRuleSet main
Next, create a SAT rule for the translation:
gw-world:/main> add IPRule Action=SAT Service=http
Finally, create an associated Allow Rule:
gw-world:/main> add IPRule Action=Allow Service=http
Web Interface
Create an address object for the public IP address:
1.
Go to Objects > Address Book > Add > IP address
2.
Specify a suitable name for the object, for example wwwsrv_pub
3.
Enter 195.55.66.77 - 195.55.66.77.81 as the IP Address
4.
Click OK
Now, create another address object for the base of the web server IP addresses:
1.
Go to Objects > Address Book > Add > IP address
2.
Specify a suitable name for the object, for example wwwsrv_priv_base
3.
Enter 10.10.10.5 as the IP Address
4.
Click OK
Publish the public addresses on the wan interface using ARP publish. One ARP item is needed for every IP
address:
1.
Go to Interfaces > ARP > Add > ARP
2.
Now enter:
Mode: Publish
Interface: wan
IP Address: 195.55.66.77
3.
Click OK and repeat for all 5 public IP addresses
Create a SAT rule for the translation:
1.
Go to Rules > IP Rules > Add > IPRule
2.
Specify a suitable name for the rule, for example SAT_HTTP_To_DMZ
Address=10.10.10.5
SourceInterface=any
SourceNetwork=all-nets
DestinationInterface=wan
DestinationNetwork=wwwsrv_pub
SATTranslateToIP=wwwsrv_priv_base
SATTranslate=DestinationIP
SourceInterface=any
SourceNetwork=all-nets
DestinationInterface=wan
DestinationNetwork=wwwsrv_pub
355
Chapter 7. Address Translation

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents