There are two [[File:SBCLynx-router-IP-forwarding.png|thumb|center|600px|Simplified block diagram of the network topology]]  Two LANshave been used:

The following devices are connected to these LANsnetworks:

To enable routing functionality, the well known [https://www.netfilter.org/ netfilter/iptables packet filtering framework ] has been added and configured to default the software provided along with XUELKby default. The following steps describe how to set up and configure netfilter to implement the desired routing policy.

Make First make sure to correctly setup static IP for the two ethernet interfaces on SBC Lynx:

Before proceding proceeding on port forwarding rules setting, the forwarding capability must be enabled on both ''<code>eth0'' </code> and ''<code>eth1'' </code> interfaces:

The following ''<code>iptables'' </code> commands are used to enable 192.168.0.209:80 <-> 192.168.11.241:80 port forwarding:

** This rule tells forward chain in the filter table to accept TCP packets on port 80 with destinadion destination IP address equal to ''192.168.11.241''. This rule is not strictly neccessarynecessary, because by default filter tables accepts all packets. But it is usefull useful for logging and packet statistic (see [[XUELK-WP001:_Configuring_SBC_Lynx_as_industrial_router#Enabling_logging | Enabling_logging]])

Here is a dump of the ''<code>FILTER'' </code> and ''<code>NAT'' </code> tables with the port forwarding rules :

To enable Iptables <code>iptables</code> logging capability the some kernel drivers must be added to default software configuration provided along with XUELK.

The logging functionality can be usefull useful for troubleshooting the iptables custom configuration. But at the same time if it is not well configured it can be too much verbose and useless, expecially especially if there is lot of traffic on the LAN.

Enabling <code>iptables </code> port forwarding log is a matter of adding rules on the chains that are interested on the port forwarding path. Here is a basic implementation of the port forwarding log:

The LOG output is appended on ''<code>/var/log/messages'' </code> file. Please note that the size of this log file in XUELK is limited to ''265kB''. When the limit size is reached the log file is backupped backed up on ''/var/log/messages.0'' and a new empty log file is started.

* ''<code>--log-prefix'' </code> : it adds a custom string on the beginning of every log entry. This is usefull useful to immediately recognize the rule that is logged.* ''<code>--log-level'' </code> : choose the log level from the standard linux log level. Selecting low log level can prints out all the iptables log also on debug console.

Other common filtering options can be used to reduce <code>iptables </code> log output size: see [https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#ss7.3 Filtering Specifications]