ZyXEL Communications ZYWALL USG 2000 Support Notes page 202

ZyWALL USG 2000 Support Notes
In total there are two Virtual Server rules in this case.
If you put the Web Server on DMZ and access from the LAN, this configuration will do as
you requested. However, if you put the Web Server on LAN and access from the LAN, you
need another Policy Route rule to realize it.
This Policy Route rule makes all the internal access must do the SNAT translation. This will
force all the traffic to go back to the ZyWALL USG 2000 and avoid the triangle route
problem.
202
All contents copyright (c) 2008 ZyXEL Communications Corporation.