ZyXEL Communications USG-300 - V2.20 ED 2, Руководство пользователя

Страница: 106 / 1149

Chapter 6 Configuration Basics
ZyWALL USG 300 User’s Guide
106
The ZyWALL only checks regular (through-ZyWALL) firewall rules for packets that
are redirected by NAT, it does not check the to-ZyWALL firewall rules.
Example: Suppose you have an FTP server with a private IP address connected to
a DMZ port. You could configure a NAT rule to forwards FTP sessions from the
WAN to the DMZ.
1
Click Configuration > Network > NAT to configure the NAT entry. Add an entry.
2
Name the entry.
3
Select the WAN interface that the FTP traffic is to come in through.
4
Specify the public WAN IP address where the ZyWALL will receive the FTP packets.
5
In the Mapped IP field , list the IP address of the FTP server. The ZyWALL will
forward the packets received for the original IP address.
6
In Mapping Type , select Port .
7
Enter 21 in both the Original and the Mapped Port fields.
6.5.11 HTTP Redirect
Configure this feature to have the ZyWALL transparently forward HTTP (web)
traffic to a proxy server. This can speed up web browsing because the proxy server
keeps copies of the web pages that have been accessed so they are readily
available the next time one of your users needs to access that page.
The ZyWALL does not check to-ZyWALL firewall rules for packets that are
redirected by HTTP redirect. It does check regular (through-ZyWALL) firewall
rules.
Example: Suppose you want HTTP requests from your LAN to go to a HTTP proxy
server at IP address 192.168.3.80.
1
Click Configuration > Network > HTTP Redirect .
2
Add an entry.
MENU ITEM(S)
Configuration > Network > NAT
PREREQUISITES
Interfaces, addresses (HOST)
MENU ITEM(S)
Configuration > Network > HTTP Redirect
PREREQUISITES
Interfaces