D-Link DFL-1600 User Manual page 110

90
rules. The first matching rule will be the one to use. According to the
specification in the rule, a routing table is selected to use. If there is
no matching rule, the PBR tables will not be used and nor PBR will
be performed. The firewall will forward the packets according to the
main routing table only.
4. Address translation – If SAT rule was encountered in the rules
consulting in step 2, address translation will be performed.
5. Final route lookup and packet forwarding – the firewall makes the
final route lookup in the routing table decided in step 3, and forward
the packet.
The decision of which routing table to use is made before carrying out
address translation. However, the actual route lookup is performed on the
altered address.
Example:
In this example we create a policy-based routing table named
"TestPBRTable".
WebUI
:
Create PBR Table
Routing Policy-based Routing Tables
Policy-based Routing Table:
Name: TestPBRTable
Ordering:
First - means that the named routing table is consulted first of all. If this
lookup fails, the lookup will continue in the main routing table.
Default - means that the main routing table will be consulted first. If the
only match is the default route (0.0.0.0/0), the named routing table will be
consulted. If the lookup in the named routing table fails, the lookup as a
whole is considered to be failed.
Only - means that the named routing table is the only one consulted. If
this lookup fails, the lookup will not continue in the main routing table.
Remove Interface IP Routes:
routes are removed, i.e. routes to the core interface, which are routes to the
firewall itself.
Then click OK
Creating a Policy-Based Routing Table
D-Link Firewalls User's Guide
Chapter 10. Routing
Add
If enabled, the default interface