Flight Tower firewall configuration 2 network link shunt

Flight Tower Configuration 2 network link shunt background description:

office network The original line bandwidth is not enough, need to add a ppoe fiber dialing, to achieve network speed, improve the network experience.

Link Assignment:

Ppoe Optical Fiber: non-company intranet traffic export, that is, visit Baidu these website traffic export

Line: access to the company's internal system directed traffic export, that is, access to the company's business background

Operation steps: 1, configure WAN1 for Ppoe Fiber dial Interface

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/8B/F8/wKiom1hdDq-SlP5aAAGNUBjocHo340.png-wh_500x0-wm_3 -wmp_4-s_3735497713.png "style=" Float:none; "title=" 1.png "alt=" Wkiom1hddq-slp5aaagnubjocho340.png-wh_50 "/>

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/8B/F4/wKioL1hdDq_hDPgDAADPaEBoU-I338.png-wh_500x0-wm_3 -wmp_4-s_4184082502.png "style=" Float:none; "title=" 2.png "alt=" Wkiol1hddq_hdpgdaadpaebou-i338.png-wh_50 "/>

2. Change the original policy

Change the destination port from the original wan2 to Wan1

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8B/F8/wKiom1hdDsPjDWezAAGcPNouHPM668.png-wh_500x0-wm_3 -wmp_4-s_1973869509.png "title=" 3.png "alt=" Wkiom1hddspjdwezaagcpnouhpm668.png-wh_50 "/>

3. Changing static routes

(1) Change the total exit route from the original Wan2 port to the Wan1 port

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8B/F4/wKioL1hdDtPz-8i8AAE2CzAqBYk568.png-wh_500x0-wm_3 -wmp_4-s_3713446152.png "title=" 4.png "alt=" Wkiol1hddtpz-8i8aae2czaqbyk568.png-wh_50 "/>

(2) because to complete the wan2 to the company intranet through the VPN tunnel access, so need to add to the remote VPN routing table, or intranet does not pass.

Purpose ip/Subnet mask: remote VPN address

Device: Select the network interface for the VPN to go out. For example: wan2

Gateway: The gateway for the network interface. For example: wan2 Gateway

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M02/8B/F4/wKioL1hdDuigp4ovAADdG66K82M556.png-wh_500x0-wm_3 -wmp_4-s_1191720059.png "style=" Float:none; "title=" 5.png "alt=" Wkiol1hdduigp4ovaaddg66k82m556.png-wh_50 "/>

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8B/F8/wKiom1hdDujQ_oF1AADWcJt9rz8909.png-wh_500x0-wm_3 -wmp_4-s_1300492570.png "style=" Float:none; "title=" 6.png "alt=" Wkiom1hddujq_of1aadwcjt9rz8909.png-wh_50 "/>

4. Verify the configuration:

(1) Test tracert Baidu

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8B/F4/wKioL1hdDvfhlGAAAAD7_5V4gtw297.png-wh_500x0-wm_3 -wmp_4-s_867059991.png "title=" 7.png "alt=" Wkiol1hddvfhlgaaaad7_5v4gtw297.png-wh_50 "/>

(2) Testing tracert intranet Service

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M01/8B/F8/wKiom1hdDweBq7ynAAAm9pL560s350.png-wh_500x0-wm_3 -wmp_4-s_1294108903.png "title=" 8.png "alt=" Wkiom1hddwebq7ynaaam9pl560s350.png-wh_50 "/>

Flight Tower firewall configuration 2 network link shunt