58 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
Example #4
In Figure 3-20, an Orbit MCR provides internet access for a laptop that is accessing a public web page.
Figure 3-20. Example 4: Unit Providing Internet Access for Laptop
SIM Type: In this scenario, the MCR-4G has a SIM card installed that simply provides Internet access.
The following commands will configure the MCR-4G for this scenario.
% set interfaces interface Bridge type bridge
% set interfaces interface Bridge bridge-settings members port ETH1
% set interfaces interface Bridge ipv4 address 192.168.1.1 prefix-length 24
% set services firewall enabled true
% set services firewall address-set LOCAL-NETS addresses [192.168.1.0/24]
% set services firewall filter IN_UNTRUSTED rule 1 match protocol icmp
% set services firewall filter IN_UNTRUSTED rule 1 actions action accept
% set services firewall filter IN_UNTRUSTED rule 10 match protocol all
% set services firewall filter IN_UNTRUSTED rule 10 actions action drop
% set services firewall filter OUT_UNTRUSTED rule 1 match src-address address-set
LOCAL-NETS
% set services firewall filter OUT_UNTRUSTED rule 1 match src-address add-interface-
address true
% set services firewall filter OUT_UNTRUSTED rule 1 actions action accept
% set services firewall filter OUT_UNTRUSTED rule 10 match protocol all
% set services firewall filter OUT_UNTRUSTED rule 10 actions action drop
% set services firewall nat source rule-set MASQ
% set services firewall nat source rule-set MASQ rule 1 source-nat interface
% set interfaces interface Cell type cell enabled true
% set interfaces interface Cell filter input IN_UNTRUSTED
% set interfaces interface Cell filter output OUT_UNTRUSTED
% set interfaces interface Cell nat source MASQ