Configuring DHCP Traffic Flow using a Masquerade Firewall Rule
Overview
This article is for creating a firewall rule to masquerade all packet from the DHCP subnet where
the output interface is the one connected to the internet.
Setup the Masquerade:
From the Web UI:
- Click on the Security icon and select NAT from the menu bar
- Click on the POSTROUTING with IPv4
- Next click on ADD
- Change the Target drop down to MASQUERADE
- Add the SourceIP/Mask (which is the subnet of the DHCP Network)
- Make sure that the Destination IP/Mask is 0.0.0.0 if you want to allow all traffic out to the internet
- Make sure to select the correct Output interface (that you want traffic to flow out of)
- The POSTROUTING should look something like this:
Related Articles
Nodegrid Routing - Routing Table, FRR, Firewall, etc.
Overview of Nodegrid Routing Most Nodegrid features are deeply rooted in networking concepts. For this reason, this article focuses on the networking configurations available on the platform and explains how they operate internally within the device. ...Setting a firewall rule to block a single IP address
Nodegrid can act as a firewall to filter traffic. It has six build in chains ( three for ipv4 and three for ipv6 ) - INPUT, OUTPUT and FORWARD Default policy can be assigned for each chain. For each chain, rules can be added deleted and modified. ...Firewall Rules for the Nodegrid Platform
Version 0.2 (17 May 2018) Overview This guide lists all required and recommended firewall rules, to ensure a proper working of the solution. The list will need to be adjusted based on specific customer requirements. By default will the firewall will ...Creating a New Firewall rule to block an Ip address or a network
There are six default chains to configure firewall rules. Three for IPv4 and three for IPv6. These chains are input , output and forward packets. One can make additional user chain if required. For each chain, policy can be created. Configuration ...Company's Firewall configuration: what resources need to be opened in Firewall for the Nodegrid appliances to connect to ZPE Cloud?
ZPE Cloud uses some IP addresses and hostnames that may be blocked by the Firewall rules. This can prevent the Nodegrid appliances from connecting to the Cloud and/or utilizing specific ZPE Cloud features. ZPE Cloud utilizes TCP port 443 for ...