How to configure NAT overload, failover between USG40 and USG210, connect to ISP

jaeyeon

Hello,

I'm getting struggling with that how to configure for PAT, failover and connecting ISP. I have 2 USGs and each ones will connect to IPS. The network will have 2 AP groups and the private IP addresses of each groups are going to be translated one public IP. I thought it should be PAT. 

I have operated other venders equipment. I am not familiar with configuration of this products. Please let me know how to configure some like below.

1. How to configure connecting ISPs?

2. How to configure Failover between USGs?

3. How to configure PAT for the each AP groups?

I have tried to find the information through the handbook and internet. But, I am still struggling with them. Please allow me to ask about them and thank you for your time.

Zyxel_Cooldia

Hi @Jaeyeon,

Welcome to Zyxel Community. 

Feel free to post your questions here, we are happy to help you.

1. How to configure connecting ISPs?

Go to “CONFIGURATION > Network > Interface > Ethernet/PPP” to set up external wan interface IP for Internet connection.

Here you can set up Static IP, DHCP, and PPPoE for Internet Access.

 

2. How to configure Failover between USGs?

You can implement Device HA if you don’t want network service down when device have hardware/service/interface failure.

A high availability (HA) solution ensures minimal network downtime and complete recovery of normal operations, while providing all the tools necessary for consistent management and configuration of the network.

The link below for your reference.

How to Configure Device HA Pro

https://businessforum.zyxel.com/discussion/4693/how-to-configure-device-ha-pro/p1?new=1

3. How to configure PAT for the each AP groups?

You can create a policy route for intranet host SNAT to assigned valid public IP to Internet.

Go to “CONFIGURATION > Network > Routing”, and create a rule on Policy route tab.

Source Address : Lan IP range/group

Source Network Address Translation : Valid public for SNAT

 

Zyxel_Cooldia

Hi @jaeyeon,
Yes, there is no tables to show real time NAT translation. 
Did you encounter any issue related to NAT where you need similar command ?

Zyxel_Cooldia

Hi @Jaeyeon,

Welcome to Zyxel Community. 

Feel free to post your questions here, we are happy to help you.

1. How to configure connecting ISPs?

Go to “CONFIGURATION > Network > Interface > Ethernet/PPP” to set up external wan interface IP for Internet connection.

Here you can set up Static IP, DHCP, and PPPoE for Internet Access.

 

2. How to configure Failover between USGs?

You can implement Device HA if you don’t want network service down when device have hardware/service/interface failure.

A high availability (HA) solution ensures minimal network downtime and complete recovery of normal operations, while providing all the tools necessary for consistent management and configuration of the network.

The link below for your reference.

How to Configure Device HA Pro

https://businessforum.zyxel.com/discussion/4693/how-to-configure-device-ha-pro/p1?new=1

3. How to configure PAT for the each AP groups?

You can create a policy route for intranet host SNAT to assigned valid public IP to Internet.

Go to “CONFIGURATION > Network > Routing”, and create a rule on Policy route tab.

Source Address : Lan IP range/group

Source Network Address Translation : Valid public for SNAT

 

jaeyeon

Thank you @Zyxel_Cooldia,

If you do not mind me asking a quick question, how to show the NAT table such as a commend "show ip nat trans" in Cisco?
Thanks again

Zyxel_Cooldia

Hi @jaeyeon,

There’s no similar CLI like “show ip nat trans” on Zywall/USG

jaeyeon

Thank you Zyxel_Cooldia

If you do not mind me asking a quick question, how to show the NAT table such as a commend "show ip nat trans" in Cisco?
Thanks again!

jaeyeon

Thank you @Zyxel_Cooldia

As far as I understood, you mean there is no way to show the NAT tables, right?

jaeyeon

Thank you Zyxel_Cooldia

If you do not mind me asking a quick question, how to show the NAT table such as a commend "show ip nat trans" in Cisco?
Thanks again!

jaeyeon

Thank you @Zyxel_Cooldia

As far as I understood, you mean there is no way to show the NAT tables, right?

Zyxel_Cooldia

Hi @jaeyeon,
Yes, there is no tables to show real time NAT translation. 
Did you encounter any issue related to NAT where you need similar command ?