Interface group and port forward multiple ports

Conjurer

Hi,

I have multiple VLANs for which I have configured multiple port forward rules. It is redirecting all non-local DNS and NTP lookups to 127.0.0.1.

In the picture above four rules for two VLANs are shown, but I have more (rules and VLANs). For every VLAN is have two rules. Now I'm rewriting my config to a new unit and thought, maybe I can do this more efficiently. I've come up with the following rule:

IG_PortForward (which is an interface group) contains interfaces 05_VL10_MGMT, 05_VL20_DMZ and all other VLANs for which I want to redirect DNS and NTP traffic to 127.0.0.1.
NAT_PortForward_IP_Ranges contains the network ranges (/24) of the VLANs that are present in interface group IG_PortForward.
NAT_PortForward_Ports contains ports 53 (DNS), and 123 (NTP).

Would this work?

viragomann

@Conjurer
Yes, should work.
However, I would use 'any' for the the destination address.

Conjurer

@viragomann
Thank you for your answer.

Like so?

I guess that makes more sense, as any destination should be redirected to 127.0.0.1.

viragomann

@Conjurer
Yes, I'm using very similar rules, but for other purposes.

Conjurer

@viragomann
Cool! Thanks for the suggestion.