How do I set up NAT port forwarding for remote AP usage on the firewall?






Scenario :
Users may wish to use the remote AP service behind a NAT scenario. For example, in the topology below, the remote AP will establish a VPN service to the destination firewall USG Flex 100.
Remote AP === internet === USG Flex 200 === (NAT ports forwarding) === USG Flex 100
Users may wonder how to set up NAT port forwarding on the USG Flex 200. This article will guide you on how to execute it.
Answer :
The remote AP service is based on VPN-related protocols, so users should configure a VPN-related service group that includes AH, ESP, IKE, and NATT services. The USG Flex 200 should execute NAT port forwarding on these ports toward the internal host USG Flex 100.
STEP 1:
Navigate to Object>Service > Service Group > to add a service group that includes AH, ESP, IKE, and NATT services.
STEP 2:
Navigate to Network > NAT > to add a NAT port rule for the internal host USG Flex 100(192.168.11.34).
STEP 3:
Navigate to Security Policy > Policy Control > to add a security policy to allow the Remote AP service to be forwarded to the internal host USG Flex 100 normally.
Categories
- All Categories
- 429 Beta Program
- 2.6K Nebula
- 163 Nebula Ideas
- 112 Nebula Status and Incidents
- 6K Security
- 350 USG FLEX H Series
- 291 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 42 Wireless Ideas
- 6.6K Consumer Product
- 261 Service & License
- 406 News and Release
- 87 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.8K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 82 Security Highlight