How to Enable IP Re-Direct?

Article ID: 53607750

Question

How to Setup IP Redirect on the WS5000 to allow all traffic on port 80 to be forwarded to a specified IP address?

Facts

WS5000 Applies to firmware v1.x and 2.x only

Answer

Need to forward all IP traffic to a specific IP address.
  1. Login to the WS5000 via web browser.
  2. Go to Create>Network>Network Policy.
  3. Type in IP Redirect NP for the name and click Next.
  4. When prompted to choose an Input Policy, click Create.
  5. Type in IP Redirect Input Policy for the policy name.
  6. When prompted to choose a Classification Group, click Create.    
  7. Name the first Classification Group Allow Web Traffic then click Next.
  8. Add the Ex HTTP Classifier that is available by default by selecting it and clicking on the right arrow >>.  Choose Allow as the Action in the drop down menu.
  9. Click Next, Finish.
  10. Create another Classification Group and name it Allow DHCP and DNS.
  11. In this Classification Group, create a new classifier by clicking Create.
  12. Name this Classifier Allow DHCP and DNS.
  13. In this Classifier, add the following Match Criteria as shown to identity DHCP and DNS traffic.
  14. Click Next, then Finish to save the Classifier.
  15. Select the Allow DHCP and DNS classifier from the list of available classifiers and click the >> arrow to add it to the right-hand list of selected classifiers.  Choose Allow as the action from the drop down menu.
  16. Click Next then click Finish to save the Classification Group.
  17. Click on Create to create a new Classification Group.  Name it Deny All Traffic.
  18. Click Create to create a new Classifier named Deny All Traffic.
  19. In this classifier, add the following Match Criteria as shown to identify all other traffic:
  20. Click Next then Finish to save this Classifier.
  21. Select the Deny All Traffic classifier from the list of available classifiers, and click on the >> arrow to add it to the right-hand list of selected classifiers.  Choose deny as the action from the drop down menu to block all traffic.  This will have the desired action of blocking traffic that does not match the Allow DHCP and DNS and Allow Web Traffic Classification Groups.
  22. Click Next, then Finish to save this classifier.
  23. After creating the necessary classification groups, you will need to add them to the Input Policy: IP Redirect Input Policy that you have begun creating.  Select the three classification groups from the available window and click the >> button to add them to the selected window.
  24. Click Next.
  25. To configure the IP Redirect feature, select the IP Redirect icon located beneath the Allow Web Traffic Classification Group listed in the left-hand pane, then click on the IP Redirect tab on the right-hand pane.  Enter the IP address and path (if directing to a file not located in root directory of server) of the desired target for the redirection.  To activate your settings, check the Enable box in the bottom left-hand corner.
  26. Click Next then Finish to save your IP Redirect Input Policy.
  27. After creating the IP Redirect Input Policy, you can select it from the drop down menu of available input policies for the Network Policy: IP Redirect NP that you have begun creating.
  28. No specific Output Policy is required for the IP Redirect functionality, so select <none> from the drop down menu of available output policies.
  29. Click Finish to save the IP Redirect NP Network Policy.
  30. Now that the IP Redirect NP Network Policy is ready for use, it can be applied to the desired WLAN via the Access Port Policy configuration. As shown below, simply select IP Redirect NP from the drop-down menu of available Network Policies for the desired WLAN. The Access Port Policy configuration can be reached from the Create (if creating a new AP Policy) or Modify (if editing an existing AP Policy) menus.
  31. Make sure that for the WLAN that you apply the IP Redirect NP to, you set the Default Route and Netmask settings according to your gateway settings.