USG-200: WAN to VLAN IP Address

A_Boschetti Posts: 1
edited April 2021 in Security
Hi all,
someone had experiense and knowledge on USG-200 about NAT on VLAN interface on LAN port?
I make VLANs on LAN port and police route and firewall/NAT rule but I can't reach from WAN to VLAN destination address.
Is possible to have an example about that feature?

Best Regards,
Andrea Boschetti


  • jasailafan
    jasailafan Posts: 191  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    It should be working. Here is an example to access RDP of a laptop in vlan.
    zone- LAN1
    base port- lan1

    nat rule
    Connect a laptop to vlan1. 
    original ip- wan ip

    firewall rule
    Add a rule 
    from WAN to LAN1
    destination- laptop's ip address
    service- RDP
    access- allow

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,444  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    @jasailafan, Thank for instruction.  =)

    Welcome to Zyxel Community.  Feel free to post your question here and we are more than happy to assist you. B)
    You can follow @jasailafan instruction to set up NAT. 
    BTW, there is no need to set up policy route for this, it may cause packet reply to wrong interface.

Security Highlight