Scenario 3 - How To Configure Nat If You Have Internet-Facing Public Servers; Application Scenario; Configuration Guide - ZyXEL Communications ZyWALL USG Series Application Notes

ZyXEL – USG Application Notes
Scenario 3 — How to Configure NAT if you have
Internet-facing Public Servers

3.1 Application Scenario

It is a common practice to place company servers behind the USG's protection; while at
the same time letting WAN side clients/servers access the intranet servers. To give an
example, the company may have an internal FTP server, which needs to be accessible
from the Internet as well. To fulfill this requirement, the user can configure a NAT
mapping rule to forward the traffic from the Internet side to intranet side. This feature
does not only ensure service availability, but also helps avoid exposing the server's real
IP address from being attacked.

3.2 Configuration Guide

Goal to achieve:
User Tom can access the Internet FTP server by accessing the Internet-facing the WAN IP
address.
Network Conditions: USG-50:
- WAN IP: 59.124.163.152
- FTP server IP: 192.168.50.33
Configuration
Step 1. Go to CONFIGURATION > Network > NAT to open the configuration screen.
13