ZyXEL ZYWALL USG 100 User Guide - Page 112

What Can Go Wrong, Configuration > Firewall, Destination, DMZ_SIP, Source, IPPBX_DMZ, Access

Get ZyXEL ZYWALL USG 100 PDF manuals and user guides View all ZyXEL ZYWALL USG 100 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 112 highlights

Chapter 5 Managing Traffic 5.6.2.4 Set Up a DMZ to LAN Firewall Rule for SIP The firewall blocks traffic from the DMZ zone to the LAN1 zone by default so you need to create a firewall rule to allow the IPPBX to send SIP traffic to the SIP clients on the LAN. 1 Click Configuration > Firewall > Add. Set the From field as DMZ and the To field as LAN1. Set the Destination to the IPPBX's DMZ IP address object (DMZ_SIP). Set the Source to IPPBX_DMZ. Leave the Access field to allow and click OK. 5.6.3 What Can Go Wrong • The ZyWALL checks the firewall rules in order and applies the first firewall rule the traffic matches. If traffic matches a rule that comes earlier in the list, it may be unexpectedly blocked. • The ZyWALL does not apply the firewall rule. The ZyWALL only apply's a zone's rules to the interfaces that belong to the zone. Make sure the WAN interface is assigned to WAN zone. 112 ZyWALL USG100-PLUS User's Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
Chapter 5 Managing Traffic
ZyWALL USG100-PLUS User’s Guide
112
5.6.2.4
Set Up a DMZ to LAN Firewall Rule for SIP
The firewall blocks traffic from the DMZ zone to the LAN1 zone by default so you need to create a
firewall rule to allow the IPPBX to send SIP traffic to the SIP clients on the LAN.
1
Click
Configuration > Firewall
>
Add
. Set the
From
field as
DMZ
and the
To
field as
LAN1
. Set
the
Destination
to the IPPBX’s DMZ IP address object (
DMZ_SIP
). Set the
Source
to
IPPBX_DMZ
. Leave the
Access
field to
allow
and click
OK
.
5.6.3
What Can Go Wrong
•
The ZyWALL checks the firewall rules in order and applies the first firewall rule the traffic
matches. If traffic matches a rule that comes earlier in the list, it may be unexpectedly blocked.
•
The ZyWALL does not apply the firewall rule. The ZyWALL only apply’s a zone’s rules to the
interfaces that belong to the zone. Make sure the WAN interface is assigned to WAN zone.