ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Betriebsanweisung PDF herunterladen (Seite 113)

Chapter 12 Virtual Servers

ZyWALL (ZLD) CLI Reference Guide

113

Create two address objects. One is named DMZ_HTTP for the HTTP server’s private IP

address of 192.168.3.7. The other one is named ge2_HTTP for the ge2 (wan1) public IP

address of 1.1.1.2.

2 Configure NAT

You need a NAT rule to send HTTP traffic coming to IP address 1.1.1.2 on ge2 (wan1) to

the HTTP server’s private IP address of 192.168.3.7. Use the following settings:

• This NAT rule is for any HTTP traffic coming in on ge2 (wan1) to IP address 1.1.1.2.

• The NAT rule sends this traffic to the HTTP server’s private IP address of 192.168.3.7

(defined in the DMZ_HTTP object).

• HTTP traffic and the HTTP server in this example both use TCP port 80. So you set

the port mapping type to “port”, the protocol type to “TCP”, and the original and

mapped ports to “80”.

3 Configure firewall

Create a firewall rule to allow HTTP traffic from the WAN zone to the DMZ web server.

Now the public can go to IP address 1.1.1.2 to access the HTTP server.

Router# configure terminal

Router(config)# address-object DMZ_HTTP 192.168.3.7

Router(config)# address-object ge2_HTTP 1.1.1.2

Router(config)#

Router(config)# ip virtual-server To-VirtualServer-WWW interface ge2

original-ip ge2_HTTP map-to DMZ_HTTP map-type port protocol tcp original-

port 80 mapped-port 80

Router(config)#

Router(config)# firewall insert 1

Router(firewall)# description To-VirtualServer-WWW

Router(firewall)# from WAN

Router(firewall)# to DMZ

Router(firewall)# destinationip DMZ_HTTP

Router(firewall)# service HTTP

Router(firewall)# exit

Router(config)# write

Router(config)#

1 2 ... 108 109 110 111 112 113 114 115 116 117 118 ... 385 386

Keine Kommentare

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Betriebsanweisung Seite 113