Figure 206 Limited Lan To Wan Irc Traffic Example; Table 108 Limited Lan To Wan Irc Traffic Example 1 - ZyXEL Communications ZyWALL USG 300 User Manual

Unified security gateway

Hide thumbs Also See for ZyWALL USG 300:

Table of Contents

The ZyWALL applies the firewall rules in order. So for this example, when the ZyWALL

receives traffic from the LAN, it checks it against the first rule. If the traffic matches (if it is

IRC traffic) the firewall takes the action in the rule (drop) and stops checking the firewall

rules. Any traffic that does not match the first firewall rule will match the second rule and the

ZyWALL forwards it.

Now suppose that your company wants to let the CEO use IRC. You can configure a LAN to

WAN firewall rule that allows IRC traffic from the IP address of the CEO's computer. You

can also configure a LAN to WAN rule that allows IRC traffic from any computer through

which the CEO logs into the ZyWALL with his/her user name. In order to make sure that the

CEO's computer always uses the same IP address, make sure it either:

• Has a static IP address,

• You configure a static DHCP entry for it so the ZyWALL always assigns it the same IP

address (see

Now you configure a LAN to WAN firewall rule that allows IRC traffic from the IP address of

the CEO's computer (192.168.1.7 for example) to go to any destination address. You do not

need to specify a schedule since you want the firewall rule to always be in effect. The

following figure shows the results of your two custom rules.

Figure 206 Limited LAN to WAN IRC Traffic Example

Your firewall would have the following configuration.

• The first row allows the LAN computer at IP address 192.168.1.7 to access the IRC

service on the WAN.

• The second row blocks LAN access to the IRC service on the WAN.

• The third row is the firewall's default policy of allowing all traffic from the LAN to go to

ZyWALL USG 300 User's Guide

DHCP Settings on page 241

DESTINATION SCHEDULE

for information on DHCP).

Chapter 20 Firewall