USG60W - forward http(s) from WAN1 to local LAN7vLANs. ?
Options
Hello Community,
i've upgraded to FW 4.39 right now - that works fine, but i've two questions about routing from WAN1 to internal (v)LANs. Here is a simple ascii scenario what i'm trying, but i can't play on the USG cause the device is in productive usage at my HomeOffice
My requirement
The USG60W is the Office to DMZ Firewall in my requiremen. the next Firewall is the INAC (InterNetAccessConnect) Firewall from my ISP. SSL VPN is working well, but how to forward http/s traffic from the ISP Firewall to an (v)LAN behind the USG60W ?
Mainly the USG60W is using 443 for HTTPS connect from WAN1 - in my scenario the USG should forward http/s to the (v)LAN behind the WAN1 port (LAN1/2/DMZ Zone). Routing is allready configured to get http/s request to the WAN1 port.
How to disable HTTPS and HTTP redirect only on WAN1 port and not for Management on LAN1 ?
SSLVPN-INAC Firewall --------> HTTP/HTTPS -----> USG -----> (v)LAN1/2/xxxx ?
Thanks and regards
Christian
Christian
0
All Replies
-
See workaround
https://businessforum.zyxel.com/discussion/comment/14529/#Comment_14529
With the ports in a group go to NAT use Virtual Server
Incoming interface WAN1
source IP any
external IP any
Internal IP the server IP
port mapping type Service-Group
external service HTTP and HTTPS group
Make firewall rule from WAN1 to LAN1
0
Categories
- All Categories
- 395 Beta Program
- 2.1K Nebula
- 117 Nebula Ideas
- 81 Nebula Status and Incidents
- 5.1K Security
- 83 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 914 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 210 Service & License
- 337 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2K FAQ
- 912 Nebula FAQ
- 415 Security FAQ
- 237 Switch FAQ
- 207 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 139 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 72 About Community
- 62 Security Highlight