PPPOE nat

Degard66
Degard66 Posts: 2
First Comment
 Freshman Member
edited April 2021 in Security
Hi, I recently encoutered problem with new customers setup.

There is VDSL line to router bridged to Zywall 110.
Zywall is taking pppoe on wan port and transalte to lan network.

Only I am unable to route incomming data frou outside network.

Goal is to route a service (port 5000) to internal address on lan 10.0.0.x to port 443
NAT is set upped as it should be WAN  - specified IP and port to port.

After dificulties i disabled policy routers (firewall) without any improvement.

Do i have to setup any other routing?

VDSL modem is comtrend provided by ISP and is bridged without any other setup to Zywall.

Do you have any ideas what can be wrong?

Comments

  • Degard66
    Degard66 Posts: 2
    First Comment
     Freshman Member
    i am able to connect to zywall remotely - that is only service that is working as it should and confirm it should be all working.
  • Zyxel_Charlie
    Zyxel_Charlie Posts: 1,034
    50 Answers 500 Comments Friend Collector Fourth Anniversary
     Zyxel Employee
    Hello Degard66,
    As your description, I just want to confirm something about this case.
    Firstly,
    Is your topology as below pircture? is any SBG on this scenario?

    Secondly,
    Do you mean the WanIP with Port 5000 to internal 10.0.0.x:443 not work?
    Charlie


  • redPlant3d
    redPlant3d Posts: 1
    First Comment

    I have exactly the same problem. Has it been solved?

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,174
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
     Zyxel Employee

    Hi @redPlant3d,

    Could you describe what the issue happened on your device? Is NAT not working when the wan interface is wan_pppoe?

    image.png

    Click this link to start: https://bit.ly/3R2Wx52
    Emily

  • StefanZ
    StefanZ Posts: 115
    First Answer First Comment Friend Collector
     Ally Member
    edited June 21

    For my GraylogServer I use this on my FLEX50:

    Settings > Network > NAT

    • Class: Virtual Server
    • Incoming: WAN (in your case you will have to use use WAN_PPP)
    • Source: Any (narrow this down for only certain clients)
    • External IP: Address-Object with my WAN-Interface-IP
    • Port-Mapping-Type: Service-Group Object (I need several ports)
    • External Service: The same Service-Group Object
    • NAT-Loopback: ON

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）