Chapter 14 IPSec VPN
ZyWALL 2 Plus User’s Guide
276
Port Forwarding
Rules
If you are configuring a
Many-to-One
rule, click this button to go to a screen
where you can configure port forwarding for your VPN tunnels. The VPN
network policy port forwarding rules let the ZyWALL forward traffic coming in
through the VPN tunnel to the appropriate IP address.
Type
Select
One-to-One
to translate a single (static) IP address on your LAN to a
single virtual IP address.
Select
Many-to-One
to translate a range of (static) IP addresses on your LAN
to a single virtual IP address. Many-to-one rules are for traffic going out from
your LAN, through the VPN tunnel, to the remote network. Use port forwarding
rules to allow incoming traffic from the remote network.
Select
Many One-to-One
to translate a range of (static) IP addresses on your
LAN to a range of virtual IP addresses.
Private Starting IP
Address
Specify the IP addresses of the devices behind the ZyWALL that can use the
VPN tunnel.
When you select
One-to-One
in the
Type
field, enter the (static) IP address of a
computer on the LAN behind your ZyWALL.
When you select
Many-to-One
or
Many One-to-One
in the
Type
field, enter
the beginning (static) IP address in a range of computers on the LAN behind
your ZyWALL.
Private Ending IP
Address
When you select
Many-to-One
or
Many One-to-One
in the
Type
field, enter
the ending (static) IP address in a range of computers on the LAN behind your
ZyWALL.
Virtual Starting IP
Address
Enter the (static) IP addresses that represent the translated private IP
addresses. These must correspond to the remote IPSec router's configured
remote IP addresses.
When you select
One-to-One
or
Many-to-One
in the
Type
field, enter an IP
address as the translated IP address. Many-to-one rules are only for traffic
going to the remote network. Use port forwarding rules to allow incoming traffic
from the remote network.
When you select
Many One-to-One
in the
Type
field, enter the beginning IP
address of a range of translated IP addresses.
Virtual Ending IP
Address
When you select
Many One-to-One
in the
Type
field, enter the ending (static)
IP address of a range of translated IP addresses.
The size of the private address range must be equal to the size of the translated
virtual address range.
Local Network
Specify the IP addresses of the devices behind the ZyWALL that can use the
VPN tunnel. The local IP addresses must correspond to the remote IPSec
router's configured remote IP addresses. You do not configure the
Local
Network
fields when you enable virtual address mapping.
Two active SAs cannot have the local and remote IP address(es) both the
same. Two active SAs can have the same local or remote IP address, but not
both. You can configure multiple SAs between the same local and remote IP
addresses, as long as only one is active at any time.
Address Type
Use the drop-down list box to choose
Single Address
,
Range Address
, or
Subnet Address
. Select
Single Address
for a single IP address. Select
Range Address
for a specific range of IP addresses. Select
Subnet Address
to specify IP addresses on a network by their subnet mask.
Starting IP Address
When the
Address Type
field is configured to
Single Address
, enter a (static)
IP address on the LAN behind your ZyWALL. When the
Address Type
field is
configured to
Range Address
, enter the beginning (static) IP address, in a
range of computers on the LAN behind your ZyWALL. When the
Address Type
field is configured to
Subnet Address
, this is a (static) IP address on the LAN
behind your ZyWALL.
Table 68
SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy (continued)
LABEL
DESCRIPTION
Содержание ADSL 2+ Security Gateway
Страница 1: ...www zyxel com ZyWALL 2 Plus Internet Security Appliance User s Guide Version 4 03 12 2007 Edition 1 ...
Страница 2: ......
Страница 25: ...Table of Contents ZyWALL 2 Plus User s Guide 25 Index 679 ...
Страница 26: ...Table of Contents ZyWALL 2 Plus User s Guide 26 ...
Страница 46: ...46 ...
Страница 88: ...Chapter 3 Wizard Setup ZyWALL 2 Plus User s Guide 88 ...
Страница 131: ...131 PART II Network LAN Screens 133 Bridge Screens 145 WAN Screens 151 DMZ Screens 171 Wireless LAN 181 ...
Страница 132: ...132 ...
Страница 144: ...Chapter 6 LAN Screens ZyWALL 2 Plus User s Guide 144 ...
Страница 180: ...Chapter 9 DMZ Screens ZyWALL 2 Plus User s Guide 180 ...
Страница 190: ...190 ...
Страница 209: ...Chapter 11 Firewall ZyWALL 2 Plus User s Guide 209 Figure 138 SECURITY FIREWALL Rule Summary Edit ...
Страница 221: ...Chapter 11 Firewall ZyWALL 2 Plus User s Guide 221 Figure 149 My Service Firewall Rule Example Rule Summary Completed ...
Страница 222: ...Chapter 11 Firewall ZyWALL 2 Plus User s Guide 222 ...
Страница 252: ...Chapter 13 Content Filtering Reports ZyWALL 2 Plus User s Guide 252 ...
Страница 265: ...Chapter 14 IPSec VPN ZyWALL 2 Plus User s Guide 265 Figure 178 SECURITY VPN VPN Rules IKE Edit Gateway Policy ...
Страница 274: ...Chapter 14 IPSec VPN ZyWALL 2 Plus User s Guide 274 Figure 181 SECURITY VPN VPN Rules IKE Edit Network Policy ...
Страница 306: ...Chapter 15 Certificates ZyWALL 2 Plus User s Guide 306 Figure 203 SECURITY CERTIFICATES My Certificates Create Basic ...
Страница 328: ...Chapter 16 Authentication Server ZyWALL 2 Plus User s Guide 328 ...
Страница 330: ...330 ...
Страница 346: ...Chapter 17 Network Address Translation NAT ZyWALL 2 Plus User s Guide 346 ...
Страница 350: ...Chapter 18 Static Route ZyWALL 2 Plus User s Guide 350 ...
Страница 398: ...Chapter 21 Remote Management ZyWALL 2 Plus User s Guide 398 ...
Страница 416: ...Chapter 24 ALG Screen ZyWALL 2 Plus User s Guide 416 ...
Страница 417: ...417 PART V Logs and Maintenance Logs Screens 419 Maintenance 447 ...
Страница 418: ...418 ...
Страница 423: ...Chapter 25 Logs Screens ZyWALL 2 Plus User s Guide 423 Figure 274 LOGS Log Settings ...
Страница 466: ...466 ...
Страница 474: ...Chapter 27 Introducing the SMT ZyWALL 2 Plus User s Guide 474 ...
Страница 496: ...Chapter 30 LAN Setup ZyWALL 2 Plus User s Guide 496 ...
Страница 504: ...Chapter 32 DMZ Setup ZyWALL 2 Plus User s Guide 504 ...
Страница 508: ...Chapter 33 Wireless Setup ZyWALL 2 Plus User s Guide 508 ...
Страница 556: ...Chapter 38 Filter Configuration ZyWALL 2 Plus User s Guide 556 ...
Страница 570: ...Chapter 40 System Information Diagnosis ZyWALL 2 Plus User s Guide 570 ...
Страница 586: ...Chapter 41 Firmware and Configuration File Maintenance ZyWALL 2 Plus User s Guide 586 ...
Страница 594: ...Chapter 42 System Maintenance Menus 8 to 10 ZyWALL 2 Plus User s Guide 594 ...
Страница 598: ...Chapter 43 Remote Management ZyWALL 2 Plus User s Guide 598 ...
Страница 603: ...603 PART VII Troubleshooting and Specifications Troubleshooting 605 Product Specifications 613 ...
Страница 604: ...604 ...
Страница 612: ...Chapter 45 Troubleshooting ZyWALL 2 Plus User s Guide 612 ...
Страница 620: ...620 ...
Страница 644: ...Appendix B Pop up Windows JavaScripts and Java Permissions ZyWALL 2 Plus User s Guide 644 ...
Страница 668: ...Appendix E Importing Certificates ZyWALL 2 Plus User s Guide 668 ...
Страница 672: ...Appendix F Legal Information ZyWALL 2 Plus User s Guide 672 ...
Страница 678: ...Appendix G Customer Support ZyWALL 2 Plus User s Guide 678 ...