How To Use An Ippbx On The Dmz - ZyXEL Communications ZyWALL USG100-Plus User Manual

Chapter 5 Managing Traffic
Click Configuration > Firewall > Add.
1
In the From field select WAN.
In the To field select LAN1.
Configure a name for the rule (WAN-to-LAN_H323 here).
Set the Destination to the H.323 device's LAN1 IP address object (LAN_H323). LAN_H323 is
the destination because the ZyWALL applies NAT to traffic before applying the firewall rule.
Set the Service to H.323.
Click OK.

5.6.2 How to Use an IPPBX on the DMZ

This is an example of making an IPPBX x6004 using SIP in the DMZ zone accessible from the
Internet (the WAN zone). In this example you have public IP address 1.1.1.2 that you will use on
the WAN interface and map to the IPPBX's private IP address of 192.168.3.9. The local SIP clients
are on the LAN.
Figure 44 IPPBX Example Network Topology
5.6.2.1 Turn On the ALG
Click Configuration > Network > ALG. Select Enable SIP ALG and Enable SIP
Transformations and click Apply.
Figure 45 Configuration > Network > ALG
5.6.2.2 Set Up a NAT Policy for the IPPBX
Click Configuration > Network > NAT > Add > Create New Object > Address and create an
IPv4 host address object for the IPPBX's private DMZ IP address of 192.168.3.9. Repeat to create a
host address object named IPPBX-Public for the public WAN IP address 1.1.1.2.
• Configure a name for the rule (WAN-DMZ_IPPBX here).
• You want the IPPBX to receive calls from the WAN and also be able to send calls to the WAN so
you set the Classification to NAT 1:1.
• Set the Incoming Interface to use the WAN interface.
110
ZyWALL USG100-PLUS User's Guide