ZyXEL Communications ZYWALL USG 1000 Support Notes page 318

ZyWALL USG 1000 Support Notes
mapping public IP address- 192.168.35.100.
2. From the Virtual Server setting, ZyWALL USG forwards it to the internal IP
192.168.105.37.
3. The Web server receives a request from the same subnet and replies it directly to PC
through L2 switch dispatching. This is known as "triangle route".
Please follow these steps to configure the ZyWALL USG in order to solve the triangle route
problem:
1-1 NAT mapping Configuration:
Firstly create two address objects: WEB_WAN as 192.168.35.100 and WEB_LAN as
192.168.105.37. After that, create the Virtual Server rule of incoming DNAT translation to
allow the server connect to outside network.
Create one Policy Route rule for outgoing SNAT to translate the private IP to public one.
After these two steps, the 1-1 NAT mapping on ZyWALL USG is complete.
318
All contents copyright (c) 2007 ZyXEL Communications Corporation.