ATP100 WAN=PPPoE float ip, How to NAT inner Web site 192.168.1.37 HTTP service to External usage

cy358

Hi, 
I have a ATP100
My connection on WAN is PPPoE with floating IP, no static fixed IP by ISP.
How to setup NAT to let inner web site 192.168.1.37 HTTP service to External usage?
Thank you.

zyman2008

Hi @cy358,
You need to configure DDNS first.
https://mysupport.zyxel.com/hc/en-us/articles/360007885880--ZLD-Where-to-configure-DDNS-settings-WebUI

Then, NAT port forwarding.
https://support.zyxel.eu/hc/en-us/articles/360001390934-NAT-Rule-Configuration-on-a-USG-Port-Forwarding

Connect your web server via DDNS name.

Zyxel_Jeff

Hi @cy358

Currently, the IP address field of NAT doesn't support the FQDN-based format, we already transferred this requirement to our future development evaluation, you could refer to this discussion ( https://community.zyxel.com/en/discussion/2583/virtual-server-fqdn-based ).

So, you might configure an IP address to User-Defined External IP field when you get a dynamic public IP, it’s should be an alternative method for you, as below:

Zyxel_Jeff

Hi @cy358

 

Here is a workaround solution can provide to you for reference.

SETP1. Add a NAT rule, as below:

Incoming Interface set to “wan1”, the external IP set to “any”, and the internal IP set to “192.168.1.37”, assuming your external and internal mapping ports are 80 both. Besides, if the incoming interface is set to “wan” and the external IP is set to “any” the LAN PCs might not match this NAT behavior normally, so please uncheck “Enable NAT Loopback” option. 

STEP2. Add a security to allow WAN to LAN traffics toward to the internal HTTP server.

So that the user who is from WAN can access the internal HTTP server.

STPE3. (Option) If you want to let the LAN user could access the HTTP server by the DDNS FQDN normally, you can add an Address record in the DNS settings, as below:

Then no matter the user in WAN or LAN, they all can access the HTTP server via the URL for example http://zyxelcso.ddns.net normally. If there is no this setting, the LAN hosts only can access the HTTP server via IP address for example http://192.168.1.37.