Routing additional IP scope to servers behind USG110
![adi_dragnic](https://us.v-cdn.net/6029482/uploads/avatarstock/nGWBMMF6TAC2D.png)
adi_dragnic
Posts: 15
Freshman Member
![](https://www.zyxel.com/library/assets/zyxel-forum/freshman_member.png)
![First Comment](https://us.v-cdn.net/6029482/uploads/badges/MBNFIRD87YVH.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
![Third Anniversary](https://us.v-cdn.net/6029482/uploads/badges/ZAPPM3HN1WUA.png)
in Security
Hi Guys,
I have USG 110 and i am trying now for a few days to get this working with no luck
, my WAN1 has an address - 80.64.xx.xx, isp provided us with new address scope 93.26.xx.xx/29. and told me that the Gateway is the gateway from WAN1.
Here is what I have configured so far with no result
I have created virtual WAN1:1
![Image: https://us.v-cdn.net/6029482/uploads/editor/8m/amoxnehl29fk.jpg](https://us.v-cdn.net/6029482/uploads/editor/8m/amoxnehl29fk.jpg)
I have created these policy routes
![](src)
![Image: https://us.v-cdn.net/6029482/uploads/editor/ji/qjgautcvdrsw.jpg](https://us.v-cdn.net/6029482/uploads/editor/ji/qjgautcvdrsw.jpg)
Created NAT Rules:
![Image: https://us.v-cdn.net/6029482/uploads/editor/oe/1djf3dn1p588.jpg](https://us.v-cdn.net/6029482/uploads/editor/oe/1djf3dn1p588.jpg)
and I have also created these policies
![Image: https://us.v-cdn.net/6029482/uploads/editor/7d/fagfsa9kseo1.jpg](https://us.v-cdn.net/6029482/uploads/editor/7d/fagfsa9kseo1.jpg)
![](src)
I am unable to access these servers with public IP addresses. I am stuck at this point and need some advice on how can I configure this to work. I think I need some routes for the public IP scope.
Looking to hearing from you soon.
Best
Adi
![](src)
![](src)
![](src)
![](src)
I have USG 110 and i am trying now for a few days to get this working with no luck
![:( :(](https://community.zyxel.com/plugins/emojiextender/emoji/twitter/frown.png)
Here is what I have configured so far with no result
I have created virtual WAN1:1
![Image: https://us.v-cdn.net/6029482/uploads/editor/8m/amoxnehl29fk.jpg](https://us.v-cdn.net/6029482/uploads/editor/8m/amoxnehl29fk.jpg)
I have created these policy routes
![Image: https://us.v-cdn.net/6029482/uploads/editor/ji/qjgautcvdrsw.jpg](https://us.v-cdn.net/6029482/uploads/editor/ji/qjgautcvdrsw.jpg)
Created NAT Rules:
![Image: https://us.v-cdn.net/6029482/uploads/editor/oe/1djf3dn1p588.jpg](https://us.v-cdn.net/6029482/uploads/editor/oe/1djf3dn1p588.jpg)
![Image: https://us.v-cdn.net/6029482/uploads/editor/7d/fagfsa9kseo1.jpg](https://us.v-cdn.net/6029482/uploads/editor/7d/fagfsa9kseo1.jpg)
Looking to hearing from you soon.
Best
Adi
0
All Replies
-
You config the LAN side subnet with 93.26.xx.xx/29 then your devices get WAN IP from your LAN you then do a routing rule incoming LAN1 next hop WAN1 with SNAT none.
remove virtual WAN1:1 and no need for NAT rules
1 -
Hi @adi_dragnic,
It looks like Public Lan scenario. You may follow PeterUK's suggestion to bind 93.26.xx.xx/29 in internal interface, and set up corresponding policy route for routing from 93.26.xx.xx/29 to Internet.0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 276 USG FLEX H Series
- 276 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 74 Security Highlight