Configuring security Firewall
Digi TransPort® Routers User Guide
788
pass out br eak end f r om any t o 10. 10. 10. 12 - > t o 10. 1. 2. 3
In addition, complete subnets can have NAT applied. The address bits not covered by the subnet mask
are taken from the original IP address. For example, to NAT the destination subnet of 192.168.0.0/24
to be 192.168.1.0/24, the firewall rule is:
pass out br eak end f r om any t o 192. 168. 0. 0/ 24 - > t o 192. 168. 1. 0/ 24
Address/port translation is not supported with IPv6 packets. A parsing error will be generated if a rule
mixes address translation with IPv6-specific keywords.
To Next Page
Loading...
