Mwan

From Wiki of WFilter NG Firewall
(Difference between revisions)
Jump to: navigation, search
(Solution)
(Policy)
Line 16: Line 16:
  
 
A solution won't work without policy. Policy is the rule to define which traffic picks which solution. Settings:
 
A solution won't work without policy. Policy is the rule to define which traffic picks which solution. Settings:
* Source IP: source ip address or ip range. You can define IP as "Any", "Single" and "Range".
+
* Source: source ip address or ip range. You can define IP as "Any", "Single IP" or "IP Range".
** For "Single", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
+
** For "Single IP", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
** For "Range", you need to input an ip range.
+
** For "IP Range", you need to input an ip range.
 
* Target, target ip or domain
 
* Target, target ip or domain
** For "Single" and "Range", the synax is the same as "Source IP".
+
** For "Single IP" and "IP Range", the synax is the same as "Source".
 
** For "Domain", you may add multiple domains. Wildcards "*?" are supported.
 
** For "Domain", you may add multiple domains. Wildcards "*?" are supported.
  

Revision as of 11:37, 24 December 2015

Contents

1 Muti-WAN

Muti-WAN enables you to set load balancing and advanced routing when you have multiple WAN interfaces. This module has no use if you only have one WAN interface.

2 Solution

You need to define line solutions at first. For example:

  • "WAN1 Only": set WAN1 as a dedicated line for business servers only.
  • "WAN2 & WAN3 Balanced": for office users to share these two lines.
  • "WAN3 Only": traffic to certain websites will be in this line.

You can add multiple line solutions, for each solution, you need to define the load balancing rank for every interface.

Ros mwan 001.png

3 Policy

A solution won't work without policy. Policy is the rule to define which traffic picks which solution. Settings:

  • Source: source ip address or ip range. You can define IP as "Any", "Single IP" or "IP Range".
    • For "Single IP", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
    • For "IP Range", you need to input an ip range.
  • Target, target ip or domain
    • For "Single IP" and "IP Range", the synax is the same as "Source".
    • For "Domain", you may add multiple domains. Wildcards "*?" are supported.

Ros mwan 002.png

Please notice: Rules are always processed from the top of a list down, first match wins. You may drag the re-order icon to re-order rules.

Ros mwan 003.png

4 FAQ

Personal tools
Namespaces

Variants
Actions
Navigation
Tools