FusionHub Sub-Tunnel Routing

Requirements:-

FusionHub - running Firmware 7.0.2 (or above)

Local devices running Firmware 7.0.2 (or above)

Based on the diagram above:-

  1. Client initiates HTTP traffic - TCP / src port 12345 / dst port 80 - Enforced to sub-tunnel by the outbound policy configured on device A
  2. FusionHub forward this HTTP packet (possibly TCP SYN) to default tunnel because there is no outbound policy configured on FH.
  3. The Web server replied packet - TCP / src port 80 / dst port 12345 - Enforced to sub-tunnel by the outbound policy configured on device B. NOTE: the rule is configured using Src Port which is a hidden option in the help dialog. (see image below)
  4. FusionHub forward the web server replied packet (possibly TCP SYNACK) to sub-tunnel according to existing session (last packet of the same session was coming in from sub-tunnel).
  5. Same as (1), this time the packet should be a TCP ACK.
  6. FusionHub forward the packet to sub-tunnel according to existing session (last packet of the same session was coming in from sub-tunnel).
  7. Same as (3).

Image to show where to configure the source port - step 3 above.

Create a new Outbound Policy Rule:-

Change the Protocol to either UDP or TCP:-

Click the Question mark next to “Port” to configure the source port:-

3 Likes