| | 46 | -Go to menu and click '''System''' |
| | 47 | - In the drop down list select '''Rules''' and you will directed to the firewall rules configuration page |
| | 48 | - You will see three tabs |
| | 49 | * WAN : Traffic coming to WAN port |
| | 50 | * LAN : Traffic coming to LAN port |
| | 51 | * Floating : Advanced Firewall Rules which can apply in any direction and to any or multiple interfaces |
| | 52 | - In the WAN tab you will see two rules already configured |
| | 53 | * Blocking your private network leaking outside |
| | 54 | * Blocking IANA reserved IPv6 addresses leaking outside |
| | 55 | - In the WAN tab you will see three rules already configured |
| | 56 | * Enabling HTTPS, HTTP and SSH (If you enable SSH) to the firewall IP |
| | 57 | * Enable All the LAN IPv4 addresses to connect outside |
| | 58 | * Enable All the LAN IPv4 addresses to connect outside |
| | 59 | Now let's create a new rule. |
| | 60 | - In your VM desktop go to left corner and click the icon. From the menu select '''Terminal Emulator''' and open a Terminal |
| | 61 | - Try to ping a known host (Your gateway, LEARN DNS or even Google) it should work |
| | 62 | - Now go to your firewall web interface Under the LAN tab click '''Add''' and You will be prompted to the Edit Firewall page |
| | 63 | - Set the parameter as follows |
| | 64 | * Action : '''Block''' |
| | 65 | * Interface : '''LAN''' |
| | 66 | * Address Family : '''IPv4''' |
| | 67 | * Protocol : '''ICMP''' |
| | 68 | * Source : '''Single Host or Alias''' |
| | 69 | * Give your vm's IP address in the text box |
| | 70 | * Destination : '''any''' |
| | 71 | * Description : '''Block ICMP from user host''' |
| | 72 | - Click '''save''' and Click '''Apply changes''' in the following page |
| | 73 | - Try ping the an IP from your VM |
| | 74 | - We will do more on rules later |
| | 77 | You can Use Static NAT if you have a special requirement Like a Web server inside your LAN. What this does is map your mentioned private IP to an additional public IP |
| | 78 | |
| | 79 | ==== Create virtual IP ==== |
| | 80 | We need to create a Additional WAN IP for the NAT. |
| | 81 | - First go to '''menu''' and select '''Firewall''', From the drop down list select '''Virtual IPs''' |
| | 82 | - In the Virtual IP's Page click on '''Add''' Button |
| | 83 | - In the next page set the following |
| | 84 | * Type : '''IP Alias''' |
| | 85 | * Interface : '''WAN''' |
| | 86 | * Address Type : ''' Single address''' |
| | 87 | * Address : Give the Spare address in the [wiki:ipallocation IP table] / 24 |
| | 88 | * Description : WAN IP for NAT |
| | 89 | - Click '''Save''' and '''Apply changes''' on the next page |
| | 90 | |
| | 91 | ==== Create NAT ==== |
| | 92 | Now lets map the created Public IP and Private IP |
| | 93 | - First go to '''menu''' and select '''Firewall''', From the drop down list select '''NAT''' |
| | 94 | - In the '''1:1''' Page click on '''Add''' Button |
| | 95 | - In the next page set the following |
| | 96 | * Interface : '''WAN''' |
| | 97 | * External subnet IP : Your spare IP address |
| | 98 | * Internal IP : '''Single host''' and give your VM's IP in the text box |
| | 99 | * Destination : '''any''' |
| | 100 | * Description : NAT For test |
| | 101 | - Click '''Save''' and '''Apply changes''' on the next page |
| | 102 | |
| | 103 | ==== Allow Access ==== |
| | 104 | - First go to '''menu''' and select '''Firewall''', From the drop down list select '''Rules''' |
| | 105 | - In the '''WAN''' tab click on '''Add''' Button |
| | 106 | - In the next page set the following |
| | 107 | * Action : '''Pass''' |
| | 108 | * Interface : '''WAN''' |
| | 109 | * Address Family : '''IPv4''' |
| | 110 | * Protocol : '''any''' |
| | 111 | * Source : '''any''' |
| | 112 | * Destination : '''Single Host or Alias''' |
| | 113 | * Give your vm's IP address in the text box |
| | 114 | * Description : '''Allowing NAT''' |
| | 115 | - Click '''Save''' and '''Apply changes''' on the next page |
| | 116 | |
| | 117 | - Now try to ping to your VM from your PC (use the Public IP address) |
| | 118 | - Now try to ssh to your VM from your PC (use the Public IP address) |
