Table of Contents
Advertisement
Chapter 6 Configuration Basics
Zones cannot overlap. Each interface and VPN tunnel can be assigned to at most one zone. Virtual
interfaces are automatically assigned to the same zone as the interface on which they run. When
you create a zone, the ISG50 does not create any firewall rule or configure remote management for
the new zone.
MENU ITEM(S)
PREREQUISITES
WHERE USED
Example: For example, to create the DMZ-2 zone, click Network > Zone and then the Add icon.
6.6.8 DDNS
Dynamic DNS maps a domain name to a dynamic IP address. The ISG50 helps maintain this
mapping.
MENU ITEM(S)
PREREQUISITES
6.6.9 NAT
Use Network Address Translation (NAT) to make computers on a private network behind the ISG50
available outside the private network.
The ISG50 only checks regular (through-ISG50) firewall rules for packets that are redirected by
NAT, it does not check the to-ISG50 firewall rules.
MENU ITEM(S)
PREREQUISITES
Example: Suppose you have an FTP server with a private IP address connected to a DMZ port. You
could configure a NAT rule to forwards FTP sessions from the WAN to the DMZ.
Click Configuration > Network > NAT to configure the NAT entry. Add an entry.
1
Name the entry.
2
Select the WAN interface that the FTP traffic is to come in through.
3
Specify the public WAN IP address where the ISG50 will receive the FTP packets.
4
In the Mapped IP field, list the IP address of the FTP server. The ISG50 will forward the packets
5
received for the original IP address.
In Mapping Type, select Port.
6
Enter 21 in both the Original and the Mapped Port fields.
7
100
Configuration > Network > Zone
Interfaces, IPSec VPN
Firewall, remote management, ADP
Configuration > Network > DDNS
Interface
Configuration > Network > NAT
Interfaces, addresses (HOST)
ISG50 User's Guide
Advertisement
Table of Contents
Troubleshooting
