ZyWALL 10 Internet Security Gateway

 

 

Table 6-3 Applying NAT in Menus 4 & 11.3

 

 

 

 

 

 

FIELD

OPTIONS

DESCRIPTION

 

 

Network

Full Feature

When you select this option the SMT will use

 

 

Address

 

Address Mapping Set 1 (menu 15.1 - see section

 

 

Translation

 

6.2.3 for further discussion). You can configure any

 

 

 

 

of the mapping types described in Table 6-2.

 

 

 

None

NAT is disabled when you select this option.

 

 

 

SUA Only

When you select this option the SMT will use

 

 

 

 

Address Mapping Set 255 (menu 15.1 - see section

 

 

 

 

6.2.3). It is a convenient, pre-configured, read only

 

 

 

 

Many-to-One port mapping set, sufficient for most

 

 

 

 

purposes and helpful to people already familiar with

 

 

 

 

SUA in previous ZyNOS versions. Note that there is

 

 

 

 

also a Server type whose IGA is 0.0.0.0 in this set.

 

 

 

 

 

 

6.2.2 Configuring NAT

To configure NAT, enter 15 from the main menu to bring up the following screen.

Menu 15 — NAT Setup

1.Address Mapping Sets

2.Server Set

Enter Menu Selection Number:

Figure 6-5 Menu 15 — NAT Setup

6.2.3 Address Mapping Sets and NAT Server Sets:

Use the Address Mapping Sets menus and submenus to create the mapping table used to assign global addresses to machines on the LAN. Each remote node must specify which NAT Address Mapping Set to use. The ZyWALL 10 has one remote node and so allows you to configure only one NAT Address Mapping Set. You can see two NAT Address Mapping sets in menu 15.1. You can only configure Set 1. Set 255 is used for SUA. When you select Full Feature in menu 4 or 11.3, the SMT will use Set 1, which supports all mapping types as outlined in Table 6-2.When you select SUA Only, the SMT will use the pre- configured Set 255 (read only) – see section 6.1.5.

The Server Set is a list of LAN side servers mapped to external ports. To use this set (one set for the ZyWALL 10), a server rule must be set up inside the NAT Address Mapping set. Please see section 6.3 for further information on these menus.

NAT

6-7