ZyXEL Communications ZyWALL 1050 User Manual page 275

Table 92 Network > Virtual Server > Edit (continued)
LABEL
Mapped End
Port
Add
corresponding
Policy Route rule
for NAT 1:1
mapping.
Add
corresponding
Policy Route rule
for NAT
Loopback.
Firewall
OK
Cancel
ZyWALL 1050 User's Guide
DESCRIPTION
This field is available if Mapping Type is Ports. Enter the end of the range of
translated destination ports if this virtual server forwards the packet. The original
port range and the mapped port range must be the same size.
If the server will initiate sessions to the clients, select this check box to create a
corresponding policy route so the ZyWALL uses the same public IP address as the
traffic's source address. This is called NAT 1:1.
Or you can click Policy Route to go to the screens where you can manually
configure a NAT 1:1 policy route for this virtual server.
See NAT 1:1 Example on page 276
Select this to allow local users to use a domain name to access this virtual server.
By default this virtual server entry only applies this address mapping to packets
coming in from the WAN.
Or you can click Policy Route to go to the screens where you can manually
configure a NAT loopback policy route for this virtual server.
See NAT Loopback Example on page 280
By default the firewall blocks incoming connections from external addresses. After
you configure your virtual server rule settings, click the Firewall link to configure a
firewall rule to allow the virtual server's traffic to come in.
The ZyWALL checks virtual servers before it applies To-ZyWALL firewall rules, so
To-ZyWALL firewall rules do not apply to traffic that is forwarded by virtual servers.
The ZyWALL still checks other firewall rules according to the source IP address
and mapped IP address.
Click OK to save your changes back to the ZyWALL.
Click Cancel to return to the Virtual Server summary screen without creating the
virtual server (if it is new) or saving any changes (if it already exists).
Chapter 16 Virtual Servers
for an example of NAT 1:1.
for an example of NAT loopback.
275