Wan with Public IP in transport network

Alex_91 · February 2021

Good Morning,

I find myself in a particular situation.
I need to connect a firewall in a network where I am given a public IP in a LAN.
Perhaps easier to understand could be the attachment.

I managed to mask MY LAN1 network to use the public IP address (in routing -> add -> From Lan1, Source Sub_Lan1 | NEXT-HOP Interface Wan1

however, the traffic coming from the firewall (ZyWALL) itself is not masked correctly and does not come out with the correct public IP. How can I get the traffic out of the ZYWALL Firewall as well?

Thanks for the support

Zyxel_Jeff · February 2021

Hi @Alex_91

In your scenario, if you would like to do SNAT you can enable it on your Policy Route.

STEP1. Add an IP address object for public IP.

Image: https://us.v-cdn.net/6029482/uploads/editor/2m/8p0ss2c6oglm.png

STEP2.Enable SNAT on your Policy Route.

Alex_91 · February 2021

Hi Jeff,

thank you for the help.

I have already created this rule, as regards the traffic coming from LAN1 everything works correctly.

The system engineer, however, tells me that the traffic coming from the firewall (I imagine to send notifications for SecureReport, to perform updates, ...) are not forwarded correctly. ( Only traffic from the firewall, and in Policy Route this option from ZyWALL to SNAT is disabled ).

dpipro · February 2021

Hi @Alex_91

you can do it by SSH

Image: https://us.v-cdn.net/6029482/uploads/editor/ci/ec8ntt2cor7a.png

Alex_91 · February 2021

It seems the rule is present with that command.

Thank you so much!!

Wan with Public IP in transport network

All Replies

Categories

Security Highlight

Security Help Center