ZyXEL Communications ZYWALL USG 2000 Support Notes page 200

ZyWALL USG 2000 Support Notes
USG 2000
1. The internal user enter the URL and the DNS client in the computer queries the domain
name "xxx.USG2000.com" from the public DNS server and retrieves the Web server's 1-1
NAT mapping public IP address- 192.168.35.100.
2. From the Virtual Server setting, ZyWALL USG 2000 forwards it to the internal IP
192.168.105.37.
3. The Web server receives a request from the same subnet and replies it directly to PC
through L2 switch dispatching. This is known as "triangle route".
Please follow these steps to configure the ZyWALL USG 2000 in order to solve the triangle
route problem:
1-1 NAT mapping Configuration:
Firstly create two address object: WEB_WAN as 192.168.35.100 and WEB_LAN as
192.168.105.37. After that, create the Virtual Server rule of incoming DNAT translation to
allow the server connect to outside network.
200
All contents copyright (c) 2008 ZyXEL Communications Corporation.