Multiple IP to one WAN port

Achro

Dear All,

I have a ZyWall 110. From ISP I'v got a 12 public IP range (mask: 255.255.255.240). I need to get them all to WAN1 port. 
I'm absolute beginner ZyWall user, so please help me. What IP adress need to be the WAN1 interface, how trunk the all address. After configure the WAN and LAN, I have to make 2 site-to-site VPN connection too

Every help welcome

Tamas from Hungary

Achro

As I see, the ZyWALL automaticaly use them.
Sorry for dumb question
T.

PeterUK

So how you getting their Public IP's? With the WAN port connected to your modem do you get one of the public IP's? Or some other IP?

Are you looking to have your LAN with these Public IP's or use 192.168.1.xxx and NAT them to the Public IP's?

Achro

Hi PeterUK, 

I get them all to WAN1 from ISP's modem. 
I have 3 local VLAN 192.168.180-181-182 for LAN, Management and Guest. 
For LAN VLAN I set DHCP server, but unfortunately my PC can't get IP.

Thx

Tamás

Zyxel_Cooldia

Hi @Achro,

Can you see DHCP packet coming to ZyWall110 Lan/VLAN interface ?

If you cannot see client send DHCP request packet on ZyWall110 Lan/VLAN interface.

You can check downlink switch VLAN setting

Packet capture for DHCP

Router> packet-trace interface ge3 extension-filter port 67 or port 68

Achro

Zyxel_Cooldia,

Yes the request packets are coming, but no reply packet

THX

Achro

UPDATE: I change the policy settings and now it works!

Achro

So my VLANs and internet connection are working.
But ...
I have a web server too. My WAN interface address is x.x.x.205. The web server's public address is x.x.x.193, local address is 192.168.180.50 and it is in VLAN5.
How the hell can I set working NAT and policy rules and the two public address.

I'm afraid I need to set up an external VLAN as well, but what IP address do I need for the WAN port if the external VLAN is x.x.x.192 / 28?

THX

Zyxel_Cooldia

Hi @Achro,

Do you mean two public IP Source NAT for 192.168.180.50(Outbound) or Destination NAT(Inbound)?

As for second question, there is no need to set up vlan for this. Just pick a valid public IP for device wan interface.

Achro

Dear @Zyxel_Cooldia,

I have IP range x.x.x.192/28 : 

Broadcast: x.x.x.207

HostMin:   x.x.x.193

HostMax:   x.x.x.206

Def. GW: x.x.x.206

Netmask: 255.255.255.240

I would like to use them all.

Our sit2site VPN is x.x.x.205 and this is the WAN1 port's IP now, I can ping it, but I can't the x.x.x.193, whitch is the web server's public IP. 

THX

T.

Achro

Zyxel_Cooldia,

Yes the request packet are coming, but no reply packet

THX

Achro

Achro

Zyxel_Cooldia,

Yes the request packet are coming, but no reply packet

THX

Achro