ZyXEL Communications ZyXEL ZyWALL 5 Quick Start Manual page 11

2 Specify an IP address and subnet mask for the DMZ
interface.
If you use private IP addresses on the DMZ, use
NAT to make the servers publicly accessible (see
Section 6).
A public IP address must be on a separate subnet
from the WAN port's public IP address. If you do not
configure NAT for the public IP addresses on the
DMZ, the ZyWALL routes traffic to the public IP
addresses on the DMZ without performing NAT.
This may be useful for hosting servers for NAT
unfriendly applications.
3 Click Apply.
4 By default, LAN/DMZ ports 1 to 4 are all LAN ports.
To configure a port as a DMZ port, click the Port
Roles tab, select its radio button next to DMZ and
click Apply.
6 NAT
NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network
to a different IP address in another. You can use the NAT Address Mapping screens to have the ZyWALL
translate multiple public IP addresses to multiple private IP addresses on your LAN (or DMZ).
The following example allows access from the WAN to an HTTP (web) server on the DMZ. The server has a
private IP address of 10.0.0.20.
ENGLISH
9