F. Routing And Nat Faq; F01. How To Add A Policy Route; F02. How To Configure A Nat - ZyXEL Communications ZYWALL 1050 Support Notes

F. Routing and NAT FAQ

F01. How to add a policy route?

From the GUI menu Policy >Route, click the "+" icon in the table and define matching
Criteria for this route. Then select a next-hop type. If you want to use Link HA and Load
Balance, "Trunk" should be selected as a next-hop type. If you want to route traffic into an
IPsec tunnel, you need to select "VPN tunnel". Please note that the policy routes will be
matched in order. If the first route matches the criteria, ZyWALL 1050 will use the route
setting to direct the traffic to the next hop.

F02. How to configure a NAT?

Unlike ZyNOS ZyWALL, the NAT setting in ZyWALL 1050 is in Policy Route and port
forwarding setting is Virtual Server as the configuration page is shown below.
Configure NAT setting in Configuration > Policy > Route
Configure port forwarding setting in Configuration > Virtual Server
In the policy route setting, there is the source network address translation (SNAT) setting is at
Address Translation area. Choose 'none' means to turn off the NAT feature for the policy route
rule accordingly. To choose "outgoing-interface" or other address objects you defined, it
means turn on the NAT feature and it will refer to the next-hop setting to execute routing.
For the specific traffic needs to be re-directed to a certain internal server, the virtual server
needs to be configured. This feature allows ports/host mapping from a WAN interface IP to an
internal DMZ/LAN IP. For example, if you want to forward HTTP traffic with 8080 port to the
ZyWALL5 in ZyWALL 1050's DMZ zone, you need to configure virtual server to forward
<Original IP(ex. ge2's IP):8080> to <Internal server IP:8080>.
F03. After I installed a HTTP proxy server and set a http redirect rule, I still can't
All contents copyright (c) 2006 ZyXEL Communications Corporation.
ZyWALL 1050 Support Notes
279