Hello and welcome to this lecture in this lecture we will configure the Net policy on the master 48
in order to have internet connectivity on the land P.C. going upstream.
So let's use now the graphical user interface.
I will just log in with admin and no password like before and we will navigate once the gooey loads
to the settings system settings something like that.
But we'll see it's self-explanatory you will see in just a moment.
So let's go to system
system.
So this is the HRA where we will configure the high availability cluster.
Now it's here in the policy and objects so click on policy and objects then go to IP V for policy.
This is the IP for policy that will help us translate basically from private IP addressing to public
IP addressing going forward on the Internet.
So again I appeal for policy and by default you will see that there is a deny all policy so it's implicit.
And if I click on it it says implicitly implicitly deny from coming from anywhere going to anywhere.
Always action deny.
Now the log it's disabled.
We'll have to create a new one so I'll click this button to create new
and first thing I have to define it's the name.
So let's say net land Net policy I would make it all capitals so policy now what's the incoming interface
of traffic.
It's coming from and if you just hover over the port.
One two three and four you will see also the IP address.
So if you don't remember exactly or forget what's the what's the port the land port.
You will see also the IP before address.
So our incoming interface it's port too and the traffic is going outbound on port one.
We will now have to define source.
So plugging on the plus sign you will have here the available options.
Now we have to define some some new object here.
We could use the all option meaning all traffic coming from port one going outbound on port on port
from Portal 4 to port 1.
But the best way is to make it make it exact.
So I'll create a new address.
And the reason behind all this it's it's implemented to most if not all of the vendors is this one.
So let's say you have a long configuration on your on your equipment and let's suppose that you have
100 places where you have your IP IP before lan address defined.
If at some point this LAN IP address or LAN subnet will change you'd have to make a hundred changes.
On the other hand if you use an object like we are defining now it's it would be much more faster and
easier.
You will just have to define basically the change in the object where the object means a name with an
IP for subnet assigned to it and then the change will just propagate throughout all your configuration.
So that's the main advantage.
So we say lan VLAN inside the type it's IP and net mask and now define here.
This specific IP address so 1 2 16 it 100 does zero slash 24 it's coming from interface again port to
and I would just click OK.
So now in the list we have also another option a new one and this is the land inside.
I would just click it and it will be added here in the source field.
Now what's the destination.
So where are we going.
We are coming from the landing site and going where because we want to reach Internet like anything.
I will just select all here the schedule.
It's always meaning the traffic will be translated from Sunday to Saturday.
So every every day of the week and any time start time and time means I mean highlighting that zero
means anytime in any day.
And I will just want to translate what service everything or specific like HDP like FTB traffic TFT
P and so on.
So I will select all because I won just plain on plain old internet access and if you see like here
you will have the net being being enabled and for the IP address on the outside.
I will use the outgoing interface address.
This means that if we now take a look on the 48.
So I will logging in for yet one admin and say show system interface.
And question mark this specific IP address 172 that 16 that 1 0 9 that 86 will be the IP address of
the translated traffic.
So every single user on the land will reach Internet by using this IP address everyone will be translated
to a single IP address.
And that's of the outgoing or outside interface address.
So let's see if there are any other important important sets set up here.
So security antivirus.
No.
Very important.
I will enable this policy by default.
It's enabled and I will live in this way.
And I will just click.
Okay.
We can see now that we have two policies here.
So this is the sequence number this is 1 in 2.
We have the implicit deny by default.
And now we also have a land not policy.
So if everything is okay the users from the from the inside land should now be able to reach Internet.
So thank you for your time and I'll see you in the next lecture.