Chapter 11 Firewall screens 175Nortel Business Secure Router 222 Configuration — Basicsthe LAN interface is an example of traffic destined for the Business SecureRouter’s LAN interface itself. You can also use LAN to LAN/Business SecureRouter rules with IP alias to control routing between two subnets on the LAN.WAN to WAN/Business Secure Router rules apply to packets coming in throughthe WAN interface that are destined for either the Business Secure Router’s WANinterface itself or a different subnet on the WAN. A management session throughthe WAN interface is an example of traffic destined for the Business SecureRouter’s WAN interface itself. By default, the Business Secure Router stops WANcomputers from using the Business Secure Router as a gateway to communicatewith other computers on the WAN. You can configure one of these rules to allow aWAN computer to manage the Business Secure Router.LAN to WAN rulesThe default rule for LAN to WAN traffic is that all users on the LAN are allowedunrestricted access to the WAN. When you configure a LAN to WAN rule, you inessence want to limit some or all users from accessing certain services on theWAN.Figure 51 LAN to WAN trafficWAN to LAN rulesThe default rule for WAN to LAN traffic blocks all incoming connections (WANto LAN). If you want to allow certain WAN users to have access to your LAN,you need to create custom rules to allow it.Business Secure Router
