Chapter 4 Tutorials

"

"

The one-to-one NAT address mapping rules are for both incoming and outgoing connections. The ZyWALL forwards traffic that is initiated from either the LAN or the WAN to the destination IP address.

The many-to-one or many-to-many NAT address mapping rules are for outgoing connections only. That means only traffic initiated from the LAN or returned packets are allowed to go through the ZyWALL.

In this example, you create two one-to-one rules to map the internal web server (192.168.1.12) and mail server (192.168.1.13) to different static public IP addresses. The many-to-one rule maps a public IP address (1.2.3.4, that is, the ZyWALL’s WAN IP address) to outgoing LAN traffic. It allows other local computers on the same subnet as the ZyWALL’s LAN IP address to use this IP address to access the Internet.

Figure 49 Tutorial Example: Mapping Multiple Public IP Addresses to Inside Servers

"The ZyWALL applies the rules in the order that you specify. You should put any one-to-one rules before a many-to-one rule.

1Click ADVANCED > NAT.

2Enable NAT and select Full Feature as you have multiple public IP addresses to map to private IP addresses. Click Apply.

102

 

ZyWALL 2 Plus User’s Guide