Wired router EdgeRoute series configuration notes

Basic Configuration

Port Planning: Network segmentation, PPPoe dial

This is relatively simple, free to write.

Dynamic IP DHCP, DNS

It is also very simple.

Configuring Dynamic DNS

If your WAN port is assigned a dynamic supplier public network IP, you can provide a fixed public network through an inlet disposed DDNS.
Such a dynamic IP will change, but the domain name is always fixed, you can run the network including Web applications accessible to the public.

ER-X supported by the DDNS service provider too, but it uses a debian based OS, you can log in directly through ssh DDNS configuration within the OS.
Currently comes with python2.7, if you want to install python-dependent, we need to pass get-pip.py installed pip.

Source Address Policy Routing Configuration

The source address routing strategy is to allow different source routing IP traffic to different ports. The main scene the following categories:

  1. In the multi-WAN (Wire Area Network) scene (EdgeRoute-X supports multi-WAN), we may want different segments of traffic moving in different WAN out.
    • For example, the segment with the telecommunications network, another network with Unicom network.

View and modify "the source address routing strategy" Configuration

The policy configuration is not displayed on Web UI panel, we need to ssh into the Terminal, see the following command:

configure  # 进入 config edit 模式
show firewall modify  # 查看所有的源地址策略路由设置
edit firewall         # 切换到 firewall 内部进行策略修改
set modify out rule <rule-id> ...  # 修改策略,每一个子命令都可以通过 [tab] 键补全

Each segment limit visits by Firewall Policy

to be continued

Guess you like

Origin www.cnblogs.com/kirito-c/p/12467498.html