# 1. Configure the firewall target (once per machine)
panredirect.exe configure --fwip 10.0.0.1

# 2. Enable the NIC(s) to monitor
panredirect.exe enable Ethernet1

# 3. (Optional) Add a pass rule so internal management traffic is not redirected
panredirect.exe rule append --iface Ethernet1 --proto tcp --remoteip 10.0.0.0/8 --localport 3389 --action pass

# 4. Start the driver
panredirect.exe start

# 5. Verify
panredirect.exe status