Configure Nat For Internal Servers - ZyXEL Communications ADSL2+ 4-port Security Gateway Support Notes

Step 1: In Prestige A, please register a DDNS account from
http://www.dyndns.org
Setp 2: Enable DynDNS function on Prestige A via Web configurator,
Advanced -> Dynamic DNS. And in VPN settings on Prestige A, please
specify the IP address of My IP as 0.0.0.0 and Secure Gateway as 0.0.0.0
(Here we take P-662H-D Web Configurator as the example).
Step 3: In Prestige B, please specify the IP address of My IP as 0.0.0.0 and
Secure Gateway as the domain name you registered for Prestige A.
Step 4: Please always initiate VPN tunnel from Prestige B on which Secure
Gateway is configured as dynamic domain name.
Solution 2:
Step 1: Register DynDNS account from
http://dynupdate.no-ip.com
Step 2: In PrestigeA, configure My IP as 0.0.0.0 and Secure Gateway as the
dynamic domain name of PrestigeB.
Step 3: In PrestigeB, configure My IP as 0.0.0.0 and Secure Gateway as the
dynamic domain name of PrestigeA.
Step 4: You can initiate VPN tunnel from PrestigeA or PrestigeB by this
solution.
(2) Prestige v.s. 3rd Party
This is highly dependent on which kind of 3rd party you use. Generally
speaking, this 3rd party VPN solution must support either of the two items:
• Support DDNS for update of it's dynamic WAN IP. (If Prestige is to be
the VPN initiator)
• Support Secure Gateway can be configured by Domain Name. (If
Prestige is to be the VPN responder)

3. Configure NAT for internal servers

Some tips for this application:
Generally, without IPSec, to configure an internal server for outside access, we
need to configure the server private IP and its service port in SUA/NAT Server
Table. The NAT router then will forward the incoming connections to the
All contents copyright © 2006 ZyXEL Communications Corporation.
or http://dynupdate.no-ip.com
http://www.dyndns.org
for both PrestigeA & PrestigeB.
P-662H-D Series Support Notes
or
95