![background image](/i/zyxel/144895/zyxel-zywall-2-ee/h/zyxel-zywall-2-ee-422.png)
ZyWALL 2 Series User’s Guide
28-8
NAT
The following table describes the fields in this screen.
Table 28-4 Menu 15.1.1.1: Editing/Configuring an Individual Rule in a Set
FIELD
DESCRIPTION
EXAMPLE
Type
Press [SPACE BAR] and then [ENTER] to select from a total of five types.
These are the mapping types discussed in
the
Web Configurator User’s
Guide.
Server
allows you to specify multiple servers of different types behind
NAT to this computer. See
section 28.4.3
for an
example.
One-to-One
Local IP
Only local IP fields are
N/A
for server; Global IP fields MUST be set for
Server
.
Start Enter the starting local IP address (ILA).
0.0.0.0
End Enter the ending local IP address (ILA). If the rule is for all local IPs, then put
the Start IP as 0.0.0.0 and the End IP as 255.255.255.255. This field is
N/A
for One-to-One and Server types.
N/A
Global IP
Start Enter the starting global IP address (IGA). If you have a dynamic IP, enter
0.0.0.0 as the
Global IP Start
. Note that
Global IP Start
can be set to 0.0.0.0
only if the types are
Many-to-One
or
Server
.
0.0.0.0
End Enter the ending global IP address (IGA). This field is
N/A
for
One-to-One
,
Many-to-One
and
Server types
.
N/A
Once you have finished configuring a rule in this menu, press [ENTER] at the message “Press ENTER to
Confirm…” to save your configuration, or press [ESC] to cancel.
28.3 Configuring a Server behind NAT
Follow these steps to configure a server behind NAT:
Step 1.
Enter 15 in the main menu to go to
Menu 15 - NAT Setup.
Step 2.
Enter 2 to go to
Menu 15.2 - NAT Server Setup
.
Step 3.
Enter a port number in an unused
Start Port No
field. To forward only one port, enter it again in
the
End Port No
field. To specify a range of ports, enter the last port to be forwarded in the
End
Port No
field.
Step 4.
Enter the inside IP address of the server in the
IP Address
field. In the following figure, you have
a computer acting as an FTP, Telnet and SMTP server (ports 21, 23 and 25) at 192.168.1.33.