ZyXEL Communications G-2000 Plus V2, User Manual

Page: 117 / 440

ZyXEL G-2000 Plus v2 User’s Guide
Chapter 8 Single User Account (SUA) / Network Address Translation (NAT) 117
8.2 Using NAT
Note: You must create a firewall rule in addition to setting up SUA/NAT, to allow
traffic from the WAN to be forwarded through the ZyXEL device.
8.2.1 SUA (Single User Account) Versus NAT
SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two
types of mapping,
Many-to-One and Server . The ZyXEL device also supports Full Feature
NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or
servers using mapping types. Select either
SUA Only
or
Full Feature
in the WAN IP
screen.
8.3 SUA Server
A SUA server set is a list of inside (behind NAT on the LAN) servers, for example, web or
FTP, that you can make visible to the outside world even though SUA makes your whole
inside network appear as a single computer to the outside world.
You may enter a single port number or a range of port numbers to be forwarded, and the local
IP address of the desired server. The port number identifies a service; for example, web
service is on port 80 and FTP on port 21. In some cases, such as for unknown services or
where one server can support more than one service (for example both FTP and web service),
it might be better to specify a range of port numbers. You can allocate a server IP address that
corresponds to a port or a range of ports.
Table 39 NAT Mapping Types
TYPE IP MAPPING SMT ABBREVIATION
One-to-One ILA1 ÅÆ IGA1 1-1
Many-to-One (SUA/PAT) ILA1 ÅÆ IGA1
ILA2 ÅÆ IGA1
…
M-1
Many-to-Many Overload ILA1 ÅÆ IGA1
ILA2 ÅÆ IGA2
ILA3 ÅÆ IGA1
ILA4 ÅÆ IGA2
…
M-M Ov
Many One-to-One ILA1 ÅÆ IGA1
ILA2 ÅÆ IGA2
ILA3 ÅÆ IGA3
…
M-1-1
Server Server 1 IP ÅÆ IGA1
Server 2 IP ÅÆ IGA1
Server 3 IP ÅÆ IGA1
Server