Chapter 20 Virtual Servers
UAG CLI Reference Guide
134
The following command shows information about all the virtual servers in the UAG.
20.2.2 Tutorial - How to Allow Public Access to a Server
This is an example of making an HTTP (web) server in the DMZ zone accessible from the Internet
(the WAN zone). You will use a public IP address of 1.1.1.2 on the wan1 interface and map it to the
HTTP server’s private IP address of 192.168.3.7.
Figure 17
Public Server Example Network Topology
Follow the following steps for the setting.
1
Configure Address object
Create two address objects. One is named DMZ_HTTP for the HTTP server’s private IP address of
192.168.3.7. The other one is named wan1_HTTP for the wan1 public IP address of 1.1.1.2.
2
Configure NAT
You need a NAT rule to send HTTP traffic coming to IP address 1.1.1.2 on wan1 to the HTTP server’s
private IP address of 192.168.3.7. Use the following settings:
• This NAT rule is for any HTTP traffic coming in on wan1 to IP address 1.1.1.2.
• The NAT rule sends this traffic to the HTTP server’s private IP address of 192.168.3.7 (defined
in the DMZ_HTTP object).
Router(config)# show ip virtual-server
virtual server: WAN-LAN_H323
active: yes
interface: wan1
NAT-loopback active: yes
NAT 1-1: no
original IP: 10.0.0.8
mapped IP: 192.168.1.56
mapping type: port
protocol type: tcp
original service:
mapped service:
original start port: 1720
original end port:
mapped start port: 1720
mapped end port:
Router(config)#
DMZ
192.168.3.7
1.1.1.2
WAN
Router# configure terminal
Router(config)# address-object DMZ_HTTP 192.168.3.7
Router(config)# address-object wan1_HTTP 1.1.1.2
Router(config)#
Summary of Contents for UAG Series
Page 5: ...Document Conventions UAG CLI Reference Guide 5 Server Firewall Telephone Switch Router ...
Page 22: ...22 PART I Introduction ...
Page 23: ...23 ...
Page 41: ...41 PART II Reference ...
Page 42: ...42 ...
