
Chapter 12 Virtual Servers
ZyWALL (ZLD) CLI Reference Guide
112
12.2.1 Virtual Server Command Examples
The following command creates virtual server WAN-LAN_H323 on the wan1 interface that
maps IP addresses 10.0.0.8 to 192.168.1.56. for TCP protocol traffic on port 1720. It also adds
a NAT loopback entry.
The following command shows information about all the virtual servers in the ZyWALL.
12.2.2 Tutorial - How to Allow Public Access to a Server
This is an example of making an HTTP (web) server in the DMZ zone accessible from the
Internet (the WAN zone). You will use a public IP address of 1.1.1.2 on the ge2 (or wan1 on
USG 100 and 200 models) interface and map it to the HTTP server’s private IP address of
192.168.3.7.
Figure 17 Public Server Example Network Topology
Follow the following steps for the setting.
1 Configure Address object
Router# configure terminal
Router(config)# ip virtual-server WAN-LAN_H323 interface wan1 original-ip
10.0.0.8 map-to 192.168.1.56 map-type port protocol tcp original-port 1720
mapped-port 1720 nat-loopback
Router(config)#
Router(config)# show ip virtual-server
virtual server: WAN-LAN_H323
active: yes
interface: wan1
NAT-loopback active: yes
NAT 1-1: no
original IP: 10.0.0.8
mapped IP: 192.168.1.56
mapping type: port
protocol type: tcp
original service:
mapped service:
original start port: 1720
original end port:
mapped start port: 1720
mapped end port:
Router(config)#
DMZ
192.168.3.7
1.1.1.2
WAN
Comentarios a estos manuales