Westermo RedFox Series - Manual (Page 738)

Westermo OS Management Guide
Version 4.17.0-0
❼ Matching parameters:
Matching parameters are optional. If you do not specify matching, all
routed packets will have the DSCP field set. Matching is enabled with
the ”match” keyword followed by one or more of the filters described
below:
– The ”in <IFNAME>” and ”out <IFNAME>” are used to match on the
inbound interface or the outbound interface.
– ”src <ADDR[/LEN]>” and ”dst <ADDR[/LEN]>” match on IP source
or IP destination. The ”LEN” parameter is used to define an IP sub-
net, and if it is omitted it will only match a specific single IP address.
– Use the ”proto <NAME|NUM>” to match on traffic with a specific IP
protocol. You can use the name, e.g., tcp, udp or icmp, or the proto-
col’s assigned number (see
http://www.iana.org/assignments/
protocol-numbers/ ).
– Use the ”dport <PORTRANGE>” argument to specify a UDP or TCP
port number or port range (ex: 1000-1010). This argument is only
valid if ”proto udp” or ”proto tcp” is included.
❼ Setting parameters:
– Use ”set dscp <VALUE>” to define the DSCP value to be set on all
packets matching the parameters described above. The value must
be provided as a decimal number in the range 0-63.
– Add parameter ”<adjust-prio>” if the internal priority of the packet
also should be updated in addition to the change of the DSCP field.
The internal priority is used to determine what network queue to
use in WeOS networking and hardware. Avoid using this option if
not necessary, as it introduces additional work for the CPU in the
unit, reducing total performance of the system.
Default values Not applicable.
31.3.5 Configure NAT Rule
Syntax [no] nat [<POS>] [type <napt|1-to-1>] [in <IFNAME>]
[out <IFNAME>] [src <ADDR[/LEN]>] [dst <ADDR[/LEN]>]
[to-dst <ADDR[/LEN]>] [addfilter] [noarp] [passive] [log]
Context Firewall Configuration context
738 ➞ 2015 Westermo Teleindustri AB