ZyWALL 10 Internet Security Gateway

The following table describes the fields in this screen.

Table 6-6 Menu 15.1.1.1 — Configuring an Individual Rule

FIELD

DESCRIPTION

EXAMPLE

Type

Press the [SPACE BAR] to toggle through a

One-to-One

 

total of five types. These are the mapping

 

 

types discussed above (see Table 6-2).

 

 

Type Server allows you to specify multiple

 

 

servers of different types behind NAT to this

 

 

machine. See section 6.4.3 below shown

 

 

next for some examples.

 

 

 

 

Local IP

Only local IP fields are N/A for server;

 

 

Global IP fields MUST be set for

 

 

Server.

 

Start

This is the starting local IP address (ILA).

0.0.0.0

End

This is the ending local IP address (ILA). If

255.255.255.255

 

the rule is for all local IPs, then put the Start

 

 

IP as 0.0.0.0 and the End IP as

 

 

255.255.255.255. This field is N/A for One-

 

 

to-One and Server types.

 

 

 

 

Global IP

 

 

Start

This is the starting global IP address (IGA).

0.0.0.0

 

If you have a dynamic IP, enter 0.0.0.0 as

 

 

the Global IP Start. Note that Global IP

 

 

Start can be set to 0.0.0.0 only if the types

 

 

are Many-to-One or Server.

 

End

This is the ending global IP address (IGA).

172.16.23.55

 

This field is N/A for One-to-One,Many-to-

 

 

One and Server types.

 

Once you have finished configuring a rule in this menu, press [ENTER] at the message “Press ENTER to Confirm…” to save your configuration, or press [ESC] to cancel.

For all Local and Global IPs, the End IP address must begin after the IP Start address,

i.e., you cannot have an End IP address beginning before the Start IP address.

6.3NAT Server Sets

A NAT server set is a list of inside servers (behind NAT on the LAN) that you can make visible to the outside world. Menu 15.2 — NAT Server Sets is used to configure these servers. Entry 12 set to port 1026 is displayed in Figure 6-11and is non-editable.

6-12

NAT