Jump to:navigation, search
Wiki





notempty
Dieser Artikel bezieht sich auf eine nicht mehr aktuelle Version!

notempty
Der Artikel für die neueste Version steht hier

notempty
Zu diesem Artikel gibt es bereits eine neuere Version, die sich allerdings auf eine Beta-Version bezieht






















































Configuration of port-based routes

Last adaptation to the version: 12.2.4

New:
  • Layout adjustments
notempty
This article refers to a Beta version
Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115
→ Firewall →Portfilter


Preliminary remark

Port based routes, also called Policy Based Routing or Rule Routing, are routing decisions that use a predefined rule to decide which gateway to forward packets to based on services, destination addresses or source addresses.

Rules with rulerouting are rarely really necessary and should only ever be an exception to enforce deviating routes for certain services from certain sources.


Set up Rule Routing

The configuration is done either under → Firewall →PortfilterTab Portfilter Button + Add Rule or by editing an already existing rule by clicking .
In the following example, all VOIP packets from the internal-network are routed via the interface LAN2:


General
Caption Value Description
Add portfilter rule
Source: internal-network Network object or user group that is allowed as the source of the data packet.
Destination: internet Destination of the data package
Service: voip Desired service with stored port
Action: Accept Forwards the package
NAT
Type: Hidenat Hides the original IP address behind the IP address of the interface used
Node: external-interface Network object that performs the translation of the IP addresses.
Extras
Rule Routing: LAN2 Thus, all VOIP packets are routed via LAN2
To finally activate the rule, click on Update rules!