Configure A Virtual Server - ZyXEL Communications ZyWALL USG 300 User Manual

Create an address object named DMZ_HTTP for the HTTP server's private IP
1
address of 192.168.3.7.
Figure 115 Creating the Address Object for the HTTP Server's Private IP Address
Create an address object named ge3_HTTP for the ge3 public IP address of
2
1.1.1.2.
Figure 116 Creating the Address Object for the ge3 Public IP Address

6.10.2 Configure a Virtual Server

You need a virtual server to send HTTP traffic coming to IP address 1.1.1.2 on ge3
to the HTTP server's private IP address of 192.168.3.7. In the Network > Virtual
Server screen, click the + symbol and create a new virtual server entry as shown
next.
• This virtual server is for traffic coming in on ge3 to IP address 1.1.1.2 (defined
in the ge3_HTTP object).
• The virtual server sends this traffic to the HTTP server's private IP address of
192.168.3.7 (defined in the DMZ_HTTP object).
• HTTP traffic and the HTTP server in this example both use TCP port 80. So you
set the Port Mapping Type to Port, the Protocol Type to TCP, and the
original and mapped ports to 80.
• In this example 1.1.1.2 is not the default IP address for sessions going out
through ge3. Select Add corresponding Policy Route rule for NAT 1:1
mapping to send the HTTP server's outgoing sessions through ge3 and use
1.1.1.2 as the source IP address (to match the IP address for accessing it). See
NAT 1:1 Example on page 302
ZyWALL USG 300 User's Guide
for details.
Chapter 6 Tutorials
143