service rule redirect
Configures a redirect service rule.
Syntax
service rule redirect addrs <addresses> [description <description>] [port1 {<port> | <port-label>}] [port2 {<port> | <port-label>}] [protocol {tcp | udp | any}] [rulenum <rule-number>] [subnet1 {<network> | all}] [subnet2 {<network> | all}] [vlan <vlan>]
Parameters
addrs <addresses> | Specifies one or more local SteelHead IP addresses (separated by commas) for redirection. |
description <description> | Specifies the description for this rule. |
port1 <port> | Specifies the first port number. |
port1 <port-label> | Specifies the first port label. Valid values correspond to port labels defined previously. |
port2 <port> | Specifies the second port number. |
port2 <port-label> | Specifies the second port label. Valid values correspond to port labels defined previously. |
protocol | Specifies the protocol name or protocol type. Valid values are: • tcp • udp • any (This is the default.) |
rulenum <rule-number> | Specifies the rule number. |
subnet1 | Specifies the first subnet. Valid values are: • <network> - IP address and mask for the service rule. Use the following format: XXX.XXX.XXX.XXX/XX • all - Specifies all IPv4 addresses. |
subnet2 | Specifies the second subnet. Valid values are: • <network> - IP address and mask for the service rule. Use the following format: XXX.XXX.XXX.XXX/XX • all - Specifies all IPv4 addresses. |
vlan <vlan> | Specifies the VLAN number. Valid values are: • all for all VLANs. • Zero (0) for untagged VLANs. • VLAN numbers from 1 to 4094 for tagged VLANs. |
Usage
When entering the IP address of the local SteelHead, only the main IP address of the local SteelHead may be specified.
You must enable the path selection feature for your changes to take effect. For details about the path selection feature, see the SteelHead Management Console User’s Guide, the SteelHead Deployment Guide, and the SteelHead Interceptor User’s Guide.
Note: When specifying the description, use underscores (_) instead of spaces between words or enclose the entire description in quotation marks (“).
Example
amnesiac (config) # service rule redirect addrs 10.10.10.1 description redirect_remote_site1_to_SH1 subnet1 12.12.0.0/16
Product
Interceptor
Related Commands
VLAN Segregation Commands
This section describes the VLAN segregation commands available on the Interceptor appliance. VLAN segregation allows network traffic from different groups of users to be kept securely segregated, creating an independent environment for each group or customer. With VLAN segregation enabled, you create instances to segregate traffic to a reserved cluster of SteelHeads.
Some commands in this section apply only to a VLAN instance. Those commands are identified with “Interceptor (VLAN instance)” listed in the Product field.