Nat rule with multiple public address

nesh

Hi, i tried to configure a nat rule using another public IP but without success on a USG1100

First i've created a virtual interface Wan 1:1 with another public ip address of my subnet, i've created the nat rule with this public ip as source ip and WAN1 as incoming interface (if i select WAN1:1 i've got a cli command error), then i've created the right rule in the policy control screen but the port 'ive selected remains closed. The same rule created with the primary ip address works well.

What's the problem in my configuration?

Thank You

PeterUK

I think you don't need virtual interface just in NAT rule for Incoming interface = wan1 and Original/External IP = your other public IP.

Can you check with packet capture for host IP your other public IP that packets are coming in

jasailafan

@nesh

The method PeterUK suggested is similar to the following KB.

Hope it helps.

http://kb.zyxel.com/KB/searchArticle!viewDetail.action?articleOid=016415&lang=EN

CHS

Hi @nesh

You can also reference to FAQ.

After added port forwarding rules, policy control rule is required.

Zyxel_Cooldia

Hi @nesh

There is no need to create virtual interface Wan1:x for 2nd IP port mapping. Just create virtual server/NAT rule and firewall rule.

You can disable the firewall rule temporarily to troubleshoot this issue. If it works after firewall rule disable, the port forwarding settings is correct, 

you can go straightly to check the firewall rule.

 

CLI disable firewall rule:

Router(config)# no firewall activate

electsystech

You can also reference this article: https://businessforum.zyxel.com/discussion/1324/how-to-route-multiple-public-static-ips-with-zyxel