ZyXEL Communications 310 User Manual page 291

Table 107 Configuration > VPN > IPSec VPN > VPN Connection > Edit (continued)
LABEL
Source NAT
Source
Destination
SNAT
Inbound Traffic
Source NAT
Source
Destination
SNAT
Destination NAT
Add
Edit
Remove
Move
#
Original IP
Mapped IP
Protocol
Original Port Start
/ Original Port End
Mapped Port Start
/ Mapped Port End
ZyWALL 110/310/1100 Series User's Guide
DESCRIPTION
This translation hides the source address of computers in the local network. It may
also be necessary if you want the ZyWALL to route packets from computers outside
the local network through the IPSec SA.
Select the address object that represents the original source address (or select
Create Object to configure a new one). This is the address object for the computer
or network outside the local network. The size of the original source address range
(Source) must be equal to the size of the translated source address range (SNAT).
Select the address object that represents the original destination address (or select
Create Object to configure a new one). This is the address object for the remote
network.
Select the address object that represents the translated source address (or select
Create Object to configure a new one). This is the address object for the local
network. The size of the original source address range (Source) must be equal to the
size of the translated source address range (SNAT).
This translation hides the source address of computers in the remote network.
Select the address object that represents the original source address (or select
Create Object to configure a new one). This is the address object for the remote
network. The size of the original source address range (Source) must be equal to the
size of the translated source address range (SNAT).
Select the address object that represents the original destination address (or select
Create Object to configure a new one). This is the address object for the local
network.
Select the address object that represents the translated source address (or select
Create Object to configure a new one). This is the address that hides the original
source address. The size of the original source address range (Source) must be
equal to the size of the translated source address range (SNAT).
This translation forwards packets (for example, mail) from the remote network to a
specific computer (for example, the mail server) in the local network.
Click this to create a new entry. Select an entry and click Add to create a new entry
after the selected entry.
Select an entry and click this to be able to modify it.
Select an entry and click this to delete it.
To change an entry's position in the numbered list, select it and click Move to display
a field to type a number for where you want to put that entry and press [ENTER] to
move the entry to the number that you typed.
This field is a sequential value, and it is not associated with a specific NAT record.
However, the order of records is the sequence in which conditions are checked and
executed.
Select the address object that represents the original destination address. This is the
address object for the remote network.
Select the address object that represents the desired destination address. For
example, this is the address object for the mail server.
Select the protocol required to use this translation. Choices are: TCP, UDP, or All.
These fields are available if the protocol is TCP or UDP. Enter the original destination
port or range of original destination ports. The size of the original port range must be
the same size as the size of the mapped port range.
These fields are available if the protocol is TCP or UDP. Enter the translated
destination port or range of translated destination ports. The size of the original port
range must be the same size as the size of the mapped port range.
Chapter 20 IPSec VPN
291