ZyXEL Communications ZYWALL 1050 Support Notes page 320

ZyWALL 1050/ZyWALL USG 300 Support Notes
In total there are two Virtual Server rules in this case.
If you put the Web Server on DMZ and access from the LAN, this configuration will do as
you requested. However, if you put the Web Server on LAN and access from the LAN, you
need another Policy Route rule to realize it.
This Policy Route rule makes all the internal access must do the SNAT translation. This will
force all the traffic to go back to the ZyWALL 1050/ZyWALL USG 300 and avoid the
triangle route problem.
320
All contents copyright (c) 2007 ZyXEL Communications Corporation.