ZyXEL ZYWALL USG 100 User Guide - Page 111

Set Up a WAN to DMZ Firewall Rule for SIP, Enable NAT Loopback

Get ZyXEL ZYWALL USG 100 PDF manuals and user guides View all ZyXEL ZYWALL USG 100 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 111 highlights

Chapter 5 Managing Traffic • Set the Original IP to the WAN address object (IPPBX-Public). If a domain name is registered for IP address 1.1.1.2, users can use it to connect to for making SIP calls. • Set the Mapped IP to the IPPBX's DMZ IP address object (IPPBX-DMZ). • Set the Port Mapping Type to Port, the Protocol Type to UDP and the original and mapped ports to 5060. • Keep Enable NAT Loopback selected to allow the LAN users to use the IPPBX. • Click OK. Figure 46 Configuration > Network > NAT > Add 5.6.2.3 Set Up a WAN to DMZ Firewall Rule for SIP The firewall blocks traffic from the WAN zone to the DMZ zone by default so you need to create a firewall rule to allow the public to send SIP traffic to the IPPBX. If a domain name is registered for IP address 1.1.1.2, users can use it to connect to for making SIP calls. Click Configuration > Firewall > Add. Set the From field as WAN and the To field as DMZ. Set the Destination to the IPPBX's DMZ IP address object (DMZ_SIP). IPPBX_DMZ is the destination because the ZyWALL applies NAT to traffic before applying the firewall rule. Set the Access field to allow and click OK. ZyWALL USG100-PLUS User's Guide 111

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
Chapter 5 Managing Traffic
ZyWALL USG100-PLUS User’s Guide
111
•
Set the
Original IP
to the WAN address object (
IPPBX-Public
). If a domain name is registered
for IP address 1.1.1.2, users can use it to connect to for making SIP calls.
•
Set the
Mapped IP
to the IPPBX’s DMZ IP address object (
IPPBX-DMZ
).
•
Set the
Port Mapping Type
to
Port
, the
Protocol Type
to
UDP
and the original and mapped
ports to 5060.
• Keep
Enable NAT Loopback
selected to allow the LAN users to use the IPPBX.
• Click
OK
.
Figure 46
Configuration > Network > NAT > Add
5.6.2.3
Set Up a WAN to DMZ Firewall Rule for SIP
The firewall blocks traffic from the WAN zone to the DMZ zone by default so you need to create a
firewall rule to allow the public to send SIP traffic to the IPPBX. If a domain name is registered for
IP address 1.1.1.2, users can use it to connect to for making SIP calls.
Click
Configuration > Firewall
>
Add
. Set the
From
field as
WAN
and the
To
field as
DMZ
. Set
the
Destination
to the IPPBX’s DMZ IP address object (
DMZ_SIP
).
IPPBX_DMZ
is the
destination because the ZyWALL applies NAT to traffic before applying the firewall rule. Set the
Access
field to
allow
and click
OK
.