ZyXEL Communications 3.1 ユーザーズマニュアル
ZyWALL (ZLD) CLI Reference Guide
119
C
H A P T E R
1 2
Virtual Servers
This chapter describes how to set up, manage, and remove virtual servers. Virtual server
commands configure NAT.
commands configure NAT.
12.1 Virtual Server Overview
Virtual server is also known as port forwarding or port translation.
Virtual servers are computers on a private network behind the ZyWALL that you want to make
available outside the private network. If the ZyWALL has only one public IP address, you can make
the computers in the private network available by using ports to forward packets to the appropriate
private IP address.
available outside the private network. If the ZyWALL has only one public IP address, you can make
the computers in the private network available by using ports to forward packets to the appropriate
private IP address.
12.1.1 1:1 NAT and Many 1:1 NAT
1:1 NAT - If the private network server will initiate sessions to the outside clients, use 1:1 NAT to
have the ZyWALL translate the source IP address of the server’s outgoing traffic to the same public
IP address that the outside clients use to access the server.
have the ZyWALL translate the source IP address of the server’s outgoing traffic to the same public
IP address that the outside clients use to access the server.
Many 1:1 NAT - If you have a range of private network servers that will initiate sessions to the
outside clients and a range of public IP addresses, use many 1:1 NAT to have the ZyWALL translate
the source IP address of each server’s outgoing traffic to the same one of the public IP addresses
that the outside clients use to access the server. The private and public ranges must have the same
number of IP addresses.
outside clients and a range of public IP addresses, use many 1:1 NAT to have the ZyWALL translate
the source IP address of each server’s outgoing traffic to the same one of the public IP addresses
that the outside clients use to access the server. The private and public ranges must have the same
number of IP addresses.
One many 1:1 NAT rule works like multiple 1:1 NAT rules, but it eases the configuration effort since
you only create one rule.
you only create one rule.
12.2 Virtual Server Commands Summary
The following table describes the values required for many virtual server commands. Other values
are discussed with the corresponding commands.
are discussed with the corresponding commands.
Table 59
Input Values for Virtual Server Commands
LABEL
DESCRIPTION
service_object
The name of a service. You may use 1-31 alphanumeric characters, underscores(
_
), or
dashes (-), but the first character cannot be a number. This value is case-sensitive.
profile_name
The name of the virtual server. You may use 1-31 alphanumeric characters,
underscores(
underscores(
_
), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.