Chapter 6 Tutorials

Maintenance > File Manager > Configuration File screen to save copies of the ZyWALLs’ configuration files that you can compare.

2To test your device HA configuration, disconnect ZyWALL A’s lan1 or wan1 interface. Computers on LAN1 should still be able to access the Internet. If they cannot, check your connections and device HA configuration.

Congratulations! Now that you have configured device HA for LAN1, you can use the same process for any of the ZyWALL’s other local networks. For example, enable device HA monitoring on the dmz interfaces and use an Ethernet switch to connect both ZyWALLs’ dmz interfaces to your publicly available servers.

6.10 How to Allow Public Access to a Server

This is an example of making an HTTP (web) server in the DMZ zone accessible from the Internet (the WAN zone). You will use a public IP address of 1.1.1.2 on the wan2 interface and map it to the HTTP server’s private IP address of 192.168.3.7.

Figure 123 Public Server Example Network Topology

DMZ

192.168.3.7

1.1.1.2

6.10.1 How to Create the Address Objects

Use Object > Address > Add to create the address objects.

1Create an address object named DMZ_HTTP for the HTTP server’s private IP address of 192.168.3.7.

Figure 124 Creating the Address Object for the HTTP Server’s Private IP Address

2Create an address object named WAN2_HTTP for the wan2 public IP address of 1.1.1.2.

 

167

ZyWALL USG 100/200 Series User’s Guide