ATP100 WAN=PPPoE float ip, How to NAT inner Web site 192.168.1.37 HTTP service to External usage

Options
cy358
cy358 Posts: 7
First Comment
in Security
Hi, 
I have a ATP100
My connection on WAN is PPPoE with floating IP, no static fixed IP by ISP.
How to setup NAT to let inner web site 192.168.1.37 HTTP service to External usage?
Thank you.

All Replies

  • zyman2008
    zyman2008 Posts: 199  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @cy358,
    You need to configure DDNS first.
    https://mysupport.zyxel.com/hc/en-us/articles/360007885880--ZLD-Where-to-configure-DDNS-settings-WebUI

    Then, NAT port forwarding.
    https://support.zyxel.eu/hc/en-us/articles/360001390934-NAT-Rule-Configuration-on-a-USG-Port-Forwarding

    Connect your web server via DDNS name.
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,079  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited September 2022
    Options

    Hi @cy358

    Currently, the IP address field of NAT doesn't support the FQDN-based format, we already transferred this requirement to our future development evaluation, you could refer to this discussion ( https://community.zyxel.com/en/discussion/2583/virtual-server-fqdn-based ).


    So, you might configure an IP address to User-Defined External IP field when you get a dynamic public IP, it’s should be an alternative method for you, as below:


  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,079  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @cy358

     

    Here is a workaround solution can provide to you for reference.

    SETP1. Add a NAT rule, as below:


    Incoming Interface set to “wan1”, the external IP set to “any”, and the internal IP set to “192.168.1.37”, assuming your external and internal mapping ports are 80 both. Besides, if the incoming interface is set to “wan” and the external IP is set to “any” the LAN PCs might not match this NAT behavior normally, so please uncheck “Enable NAT Loopback” option. 

    STEP2. Add a security to allow WAN to LAN traffics toward to the internal HTTP server.


    So that the user who is from WAN can access the internal HTTP server.

    STPE3. (Option) If you want to let the LAN user could access the HTTP server by the DDNS FQDN normally, you can add an Address record in the DNS settings, as below:


    Then no matter the user in WAN or LAN, they all can access the HTTP server via the URL for example http://zyxelcso.ddns.net normally. If there is no this setting, the LAN hosts only can access the HTTP server via IP address for example http://192.168.1.37.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）