DMZ Setup with Single Static IP but No 1:1 NAT

Ketan · December 2018

I have checked the internet/forum but couldn't reach a solution.

I have been provided only one static IP by our ISP. And I want to setup a server and give it the public IP (direct DMZ access) so that there is no NAT (not even 1:1) on that specific one server. Other machines on lan2 behind zyxell should also have internet access. Can you guide on how to do it? Port Forwarding and NAT is causing issue with the WebRTC Protocol and as a result, I want to directly put the server on public ip.

Please note, I can not have any NAT on DMZ as it is causing issues with the WebRTC protocol.

Ketan · December 2018

I have ZyWALL USG 20.

CHS · December 2018

Hi @Ketan

If ISP only provided an IP address for your server, then device is unable access to internet any more....it means LAN2 servers unable access to internet.

Dose ISP will provide other IP address to you? You must assign an IP address for your device.

ESYS_SW · December 2018

You'll ahve to have at least (2) public IPs. Either you obtain a 2nd static for the WEB RTC server or else you assign the one static you already have to the WEB RTC and let the USG20 grab a DHCP address on it's WAN interface.

ESYS_SW · December 2018

You can read more detail on this subject from my post here https://businessforum.zyxel.com/discussion/1324/how-to-route-multiple-public-static-ips-with-zyxel#latest

DMZ Setup with Single Static IP but No 1:1 NAT

All Replies

Categories

Security Help Center