ZyWALL 5/35/70 Series User’s Guide

The following table describes the fields in this menu.

Table 214 Applying NAT in Menus 4 & 11.1.2

FIELD

DESCRIPTION

OPTIONS

 

 

 

Network

When you select this option the SMT will use Address Mapping Set 1

Full Feature

Address

(menu 15.1 - see Section 42.2.1 on page 565 for further discussion). You

 

Translation

can configure any of the mapping types described in Chapter 22 on page

 

 

374. Choose Full Feature if you have multiple public WAN IP addresses

 

 

for your ZyWALL.

 

 

When you select Full Feature you must configure at least one address

 

 

mapping set.

 

 

NAT is disabled when you select this option.

None

 

 

 

 

When you select this option the SMT will use Address Mapping Set 255

SUA Only

 

(menu 15.1 - see Section 42.2.1 on page 565). Choose SUA Only if you

 

 

have just one public WAN IP address for your ZyWALL.

 

42.2 NAT Setup

Use the address mapping sets menus and submenus to create the mapping table used to assign global addresses to computers on the LAN and the DMZ. Set 255 is used for SUA. When you select Full Feature in menu 4, menu 11.1.2 or menu 11.2.2, the SMT will use Set 1 for the first WAN port and Set 2 for the second WAN port. When you select SUA Only, the SMT will use the pre-configured Set 255 (read only).

The server set is a list of LAN and DMZ servers mapped to external ports. To use this set, a server rule must be set up inside the NAT address mapping set. Please see the section on port forwarding in Chapter 22 on page 374 for further information on these menus. To configure NAT, enter 15 from the main menu to bring up the following screen.

Note: On a ZyWALL with two WAN ports, you can configure port forwarding and trigger port rules for the first WAN port and separate sets of rules for the second WAN port.

Figure 315 Menu 15: NAT Setup

Menu 15 - NAT Setup

1.Address Mapping Sets

2.Port Forwarding Setup

3.Trigger Port Setup

Enter Menu Selection Number:

Note: Configure DMZ, WLAN and LAN IP addresses in NAT menus 15.1 and 15.2. DMZ, WLAN and LAN IP addresses must be on separate subnets.

Chapter 42 Network Address Translation (NAT)

564