Jump to:navigation, search
Wiki




































Configuration of port-based routes

Last adaptation to the version: 12.6.0

New:
  • Updated to Redesign of the webinterface
notempty
This article refers to a Beta version
Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115
Firewall Packet Filter


Preliminary remark

Port based routes, also called Policy Based Routing or Rule Routing, are routing decisions that use a predefined rule to decide which gateway to forward packets to based on services, destination addresses or source addresses.

notempty
Rules with rulerouting are rarely really necessary and should only ever be an exception to enforce deviating routes for certain services from certain sources.



Set up Rule Routing

The configuration is done either under Firewall Packetfilter  button Add Rule or by editing an already existing rule by clicking .
In the following example, all VOIP packets from the internal-network are routed via the interface LAN2:

General
Caption Value Description Add rule UTMuser@firewall.name.fqdnFirewallPacket filter Add portfilter rule
Source: internal-network Network object or user group that is allowed as the source of the data packet.
Destination: internet Destination of the data package
Service: voip Desired service with stored port
Action: Accept Forwards the package
NAT
Type: Hidenat Hides the original IP address behind the IP address of the interface used
Network object: external-interface Network object that performs the translation of the IP addresses.
Extras
Rule Routing: LAN2 Thus, all VOIP packets are routed via LAN2

To finally activate the rule, click on Save and close after Update rules!