User Manual

31
UniFi Controller User Guide
Ubiquiti Networks, Inc.
Chapter 3: Using the UniFi Controller Software
Create or Edit a Static Route
Name Enter a name for the static route.
Enabled Check this box checked to enable the route. The
route is enabled by default.
Type This read-only field displays the route type: Static.
Network Enter the IP address and subnet mask using
CIDR or slash notation:
<network_IP_address>/<subnet_mask_number>
(example: 192.0.2.0/24).
Distance Enter the static route’s administrative distance.
This is a number between 1 and 255. This number is often
set to 1 (or a similarly low value) to create a route with a
shorter distance than dynamic routes.
Static Route Type Select the static route’s type:
• Next Hop The IP address of the next hop gateway for
the desired routing path. This is the default.
• Interface Interface routes are used with point-to-point
connections, where there need not be a gateway IP.
They are most often used with VPNs.
• Black Hole This is used to forward unwanted traffic into
a black hole, or to drop it.
Next Hop (Available if Static Route Type is Next Hop.) Enter
the next hop IP address.
Interface (Available if Static Route Type is Interface.) Select
the interface.
Save Click to apply changes.
Cancel Click to discard changes.
Create or Edit a Firewall Rule
Create New Rule
Name Enter a name for the rule.
Enabled Enables or disables the rule (enabled by default).
Rule Applied Specify when the rule will be applied:
before Predefined Rules (default) or after Predefined Rules.
Action Select the action to take if the rule criteria are
satisfied:
• Drop Packets are blocked with no message. This is the
default action.
• Reject Packets are blocked, and an ICMP (Internet
Control Message Protocol) message is sent saying that
the destination is unreachable.
• Accept Packets are allowed through the firewall.
Protocol Specify the protocol(s) to which the rule applies.
Select one of the following:
• All Match packets of all protocols (default).
• TCP Match TCP packets.
• UDP Match UDP packets.
• TCP and UDP Match TCP and UDP packets.
• Choose a protocol by name Select a protocol from the
drop-down list to match packets of that protocol.
• Enter a protocol number Enter the port number of the
protocol to match packets of that protocol.
• Match all protocols except for this Match all protocols
except for the selected protocol(s) (at least one protocol
must be selected; All is not a valid selection with this
option).