Digi IX30

Routing IP routing
IX30 User Guide
299
3. Create new firewall zones:
a. Create a firewall zone named CellularWAN with Source NAT enabled:
i. Create the firewall zone:
(config)> add firewall zone CellularWAN
(config firewall zone CellularWAN)>
i. Enable Source NAT on the new zone:
(config firewall zone CellularWAN)> src_nat true
(config firewall zone CellularWAN)>
b. Create second firewall zone named EthernetWAN with Source NATenabled:
i. Type .. to move back one node in the configuration:
(config firewall zone CellularWAN)> ..
(config firewall zone)>
ii. Create the firewall zone:
(config firewall zone)> add EthernetWAN
(config firewall zone EthernetWAN)>
i. Enable Source NAT on the new zone:
(config firewall zone EthernetWAN)> src_nat true
(config firewall zone EthernetWAN)>
4. Configure the WANinterfaces to use the new zones:
a. Set the zone for the cellular WANinterface:
i. Type ... to move to the root of the configuration:
(config firewall zone EthernetWAN)> ...
(config)>
ii. Set the zone:
(config)> network interface zone CellularWAN
(config)>
b. Set the zone for the Ethernet WAN interface:
(config)> network interface zone EthernetWAN
(config)>
5. Configure the policy-based route for traffic from the client device that will be sent over the
cellular WAN:
a. Add a new routing policy:
(config)> add network route policy end
(config network route policy 0)>