
Network Configuration
successful
eqcli > vlan external subnet net destination 0.0.0.0/0gw10.0.0.68
12000287: Operation successful
eqcli > vlan external subnet net route 192.168.105.0/24gw192.168.211.2 eqcli:
12000287: Operation successful
The first two commands simply replace the def_src_addr flag with the same rule but entered manually. This will
allow us to enter manual rules for the internal network later.
The third command adds a source route for the external network to use the internal network when sending packets
to the new destination network. Without this source route, all traffic from the
external
network would be sent to the
10.0.0.254 gateway.
Now the internal network configuration:
eqcli > vlan internal subnet net route 192.168.105.0/24gw192.168.211.2 eqcli:
12000287: Operation successful
eqcli > vlan internal subnet net destination 192.168.105.0/24
192.168.211.8
eqcli: 12000287: Operation successful
The first command creates a source route which Equalizer will use when talking to the new destination network
from the internal network. (The previous source route was for talking to the destination network from the external
network).
The second command defines the destination network itself.
eqcli > show sbr
IPv4 Default Source Selection Table:
192.168.105/24 192.168.211.8
0/0 10.0.0.68
IPv6 Default Source Selection Table: Source
Routing Table:
0.0.0.0/00:
192.168.105.0/24 ‘via 192.168.211.2
default via 10.0.0.254
192.168.211.0/24:
192.168.105.0/24 via 192.168.211.2
default via 10.0.0.254
96
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Comentarios a estos manuales