ZyXEL Communications ZyWALL 300 User Manual
Chapter 5 Configuration Basics
ZyWALL USG 300 User’s Guide
121
11 Add a policy that uses the schedule, the filtering profile and the user that you created.
5.4.18 Virtual Server (Port Forwarding)
Use this to change the address and/or port number of packets coming in from a specified
interface. This is also known as port forwarding.
interface. This is also known as port forwarding.
The ZyWALL does not check to-ZyWALL firewall rules for packets that are redirected by
virtual server. It does check regular (through-ZyWALL) firewall rules.
virtual server. It does check regular (through-ZyWALL) firewall rules.
Example: Suppose you have an FTP server with a private IP address connected to a DMZ
port. You could configure a virtual server rule to forwards FTP sessions from the WAN to the
DMZ.
port. You could configure a virtual server rule to forwards FTP sessions from the WAN to the
DMZ.
1 Click Network > Virtual Server to configure the virtual server. Add an entry.
2 Name the entry.
3 Select the WAN interface that the FTP traffic is to come in through (in this example, ge2
2 Name the entry.
3 Select the WAN interface that the FTP traffic is to come in through (in this example, ge2
or ge3.)
4 Specify the public WAN IP address where the ZyWALL will receive the FTP packets.
5 In the Mapped IP field, list the IP address of the FTP server. The ZyWALL will
5 In the Mapped IP field, list the IP address of the FTP server. The ZyWALL will
forward the packets received for the original IP address.
6 In Mapping Type, select Port.
7 Enter 21 in both the Original and the Mapped Port fields.
7 Enter 21 in both the Original and the Mapped Port fields.
5.4.19 HTTP Redirect
Configure this feature to have the ZyWALL transparently forward HTTP (web) traffic to a
proxy server. This can speed up web browsing because the proxy server keeps copies of the
web pages that have been accessed so they are readily available the next time one of your users
needs to access that page.
proxy server. This can speed up web browsing because the proxy server keeps copies of the
web pages that have been accessed so they are readily available the next time one of your users
needs to access that page.
The ZyWALL does not check to-ZyWALL firewall rules for packets that are redirected by
HTTP redirect. It does check regular (through-ZyWALL) firewall rules.
HTTP redirect. It does check regular (through-ZyWALL) firewall rules.
Example: Suppose you want HTTP requests from your LAN to go to a HTTP proxy server at
IP address 192.168.3.80.
IP address 192.168.3.80.
1 Click Network > HTTP Redirect.
2 Add an entry.
3 Name the entry.
4 Select the interface from which you want to redirect incoming HTTP requests (ge1 is a
2 Add an entry.
3 Name the entry.
4 Select the interface from which you want to redirect incoming HTTP requests (ge1 is a
LAN interface by default).
5 Specify the IP address of the HTTP proxy server.
6 Specify the port number to use for the HTTP traffic that you forward to the proxy server.
6 Specify the port number to use for the HTTP traffic that you forward to the proxy server.
MENU ITEM(S)
Network > Virtual Server
PREREQUISITES
Interfaces, addresses (HOST)
MENU ITEM(S)
Network > HTTP Redirect
PREREQUISITES
Interfaces