ZyXEL ZYWALL USG 100 User Guide - Page 109

Set Up a NAT Policy For H.323, Set Up a Firewall Rule For H.323 - port forwarding on

Get ZyXEL ZYWALL USG 100 PDF manuals and user guides View all ZyXEL ZYWALL USG 100 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 109 highlights

Figure 43 Configuration > Network > ALG Chapter 5 Managing Traffic 5.6.1.2 Set Up a NAT Policy For H.323 In this example, you need a NAT policy to forward H.323 (TCP port 1720) traffic received on the ZyWALL's 10.0.0.8 WAN IP address to LAN IP address 192.168.1.56. 1 Click Configuration > Network > NAT > Add > Create New Object > Address and create an IPv4 host address object for the public WAN IP address (called WAN_IP-for-H323 here). Repeat to create an address object for the H.323 device's private LAN IP address (called LAN_H323 here). Configure a name for the rule (WAN-LAN_H323 here). You want the LAN H.323 device to receive peer-to-peer calls from the WAN and also be able to initiate calls to the WAN so you set the Classification to NAT 1:1. Set the Incoming Interface to the WAN interface. Set the Original IP to the WAN address object (WAN_IP-for-H323). Set the Mapped IP to the H.323 device's LAN IP address object (LAN_H323). Set the Port Mapping Type to Port, the Protocol Type to TCP and the original and mapped ports to 1720. Click OK. 5.6.1.3 Set Up a Firewall Rule For H.323 Configure a firewall rule to allow H.323 (TCP port 1720) traffic received on the WAN_IP-for-H323 IP address to go to LAN IP address 192.168.1.56. ZyWALL USG100-PLUS User's Guide 109

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
Chapter 5 Managing Traffic
ZyWALL USG100-PLUS User’s Guide
109
Figure 43
Configuration > Network > ALG
5.6.1.2
Set Up a NAT Policy For H.323
In this example, you need a NAT policy to forward H.323 (TCP port 1720) traffic received on the
ZyWALL’s 10.0.0.8 WAN IP address to LAN IP address 192.168.1.56.
1
Click
Configuration > Network > NAT >
Add > Create New Object > Address
and create an
IPv4 host address object for the public WAN IP address (called WAN_IP-for-H323 here). Repeat to
create an address object for the H.323 device’s private LAN IP address (called LAN_H323 here).
Configure a name for the rule (WAN-LAN_H323 here).
You want the LAN H.323 device to receive peer-to-peer calls from the WAN and also be able to
initiate calls to the WAN so you set the
Classification
to
NAT 1:1
.
Set the
Incoming Interface
to the WAN interface.
Set the
Original IP
to the WAN address object (
WAN_IP-for-H323
).
Set the
Mapped IP
to the H.323 device’s LAN IP address object (
LAN_H323
).
Set the
Port Mapping Type
to
Port
, the
Protocol Type
to
TCP
and the original and mapped ports
to 1720.
Click
OK
.
5.6.1.3
Set Up a Firewall Rule For H.323
Configure a firewall rule to allow H.323 (TCP port 1720) traffic received on the WAN_IP-for-H323 IP
address to go to LAN IP address 192.168.1.56.