Chapter 5 Managing Traffic
ZyWALL USG 20-2000 User’s Guide
115
Figure 47
Configuration > Network > ALG
5.7.1.2 Set Up a NAT Policy For H.323
In this example, you need a NAT policy to forward H.323 (TCP port 1720) traffic received on the
ZyWALL’s 10.0.0.8 WAN IP address to LAN IP address 192.168.1.56.
1
Click
Configuration > Network > NAT >
Add > Create New Object > Address
and create an
IPv4 host address object for the public WAN IP address (called WAN_IP-for-H323 here). Repeat to
create an address object for the H.323 device’s private LAN IP address (called LAN_H323 here).
Configure a name for the rule (WAN-LAN_H323 here).
You want the LAN H.323 device to receive peer-to-peer calls from the WAN and also be able to
initiate calls to the WAN so you set the
Classification
to
NAT 1:1
.
Set the
Incoming Interface
to the WAN interface.
Set the
Original IP
to the WAN address object (
WAN_IP-for-H323
).
Set the
Mapped IP
to the H.323 device’s LAN IP address object (
LAN_H323
).
Set the
Port Mapping Type
to
Port
, the
Protocol Type
to
TCP
and the original and mapped ports
to 1720.
Click
OK
.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
