ZyXEL Communications ZyWALL5UTM 4.0 User Manual

Page of 803
ZyWALL 5/35/70 Series User’s Guide
381 
Chapter 22 Network Address Translation (NAT)
Figure 183   Multiple Servers Behind NAT Example
22.5.4  NAT and Multiple WAN
The ZyWALL has two WAN ports. You can configure port forwarding and trigger port rule 
sets for the first WAN port and separate sets of rules for the second WAN port. 
22.5.5  Port Translation
The ZyWALL can translate the destination port number or a range of port numbers of packets 
coming from the WAN to another destination port number or range of port numbers on the 
LAN (or DMZ). When you use port forwarding without port translation, a single server on the 
LAN or DMZ can use a specific port number and be accessible to the outside world through a 
single WAN IP address. When you use port translation with port forwarding, multiple servers 
on the LAN or DMZ can use the same port number and still be accessible to the outside world 
through a single WAN IP address.
The following example has two web servers on a LAN. Server A uses IP address 192.168.1.33 
and server B uses 192.168.1.34. Both servers use port 80. The letters a.b.c.d represent the 
WAN port’s IP address. The ZyWALL translates port 8080 of traffic received on the WAN 
port (IP address a.b.c.d) to port 80 and sends it to server A (IP address 192.168.1.33). The 
ZyWALL also translates port 8100 of traffic received on the WAN port (also IP address 
a.b.c.d) to port 80, but sends it to server B (IP address 192.168.1.34). 
Note: In this example, anyone wanting to access server A from the Internet must use 
port 8080. Anyone wanting to access server B from the Internet must use port 
8100.