Re: Zyxel ZyWall 10 router MADNESS
From: MC (daven(delete_this)_at_miraclecatDELETETHISTOO.com)
Date: 09/13/04
- Next message: DaveW: "Re: IP address spoofing"
- Previous message: Rolleston: "Re: Kerio and .NET Applications"
- In reply to:(deleted message) shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Next in thread: shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Reply:(deleted message) shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 12 Sep 2004 22:54:17 GMT
Ok, I am stumped again.
How can I access a LAN server from the WAN?
I have my rules in as you directed, but I can't ping anything on the LAN
side VIA the WAN side.
For example, I set up a webserver on 192.168.0.12, but I can't ping (or
access any port) from the WAN IP of 192.168.1.12
The firewall is still off (until I figure this out)
According to the instructions, I should not have to use port mapping because
of one to one assignments of internal to external IPs don't require this.
I tried to do the port mapping anyway (for kicks just in case there was
another undocumented configuration) if I could get WAN to LAN access but I
get "Server ports duplicate!" when I try to put in 192.168.0.12 with
starting port of 1 and ending port of 65535 (or any start/end ports for that
matter). I figured it would not work as you have direct unique ip
assignments already.
Here are the Address Mappings:
# Local Start IP Local End IP Global Start IP Global End IP
Type
1 192.168.0.10 192.168.0.12 192.168.1.10 192.168.1.12 M-M No
2 0.0.0.0 255.255.255.255 0.0.0.0 N/A M-1
3 N/A N/A 0.0.0.0 N/A Server
"shopping.nowthor.com" <nospam@shopping.nowthor.com> wrote in message
news:aj89k09mjaoucpk95bmshv1gmeb6kq7vtl@4ax.com...
> On Sat, 11 Sep 2004 19:14:11 GMT, "MC"
> <daven(delete_this)@miraclecatDELETETHISTOO.com> wrote:
> >
> >The WAN IP port is STATIC and set to 192.168.1.1 255.255.255.0 (e.g.
> >internal class C)
> >The LAN IP port is STATIC and set to 192.168.0.1 255.255.255.0 (e.g.
> >internal class C)
> >DHCP is turned off. Firewall is turned off.
> >3 machines on the LAN side are configured mapped MANY-TO-ONE OVERLOAD
> >192.168.0.10-12 LAN mapped to IPs 192.168.1.10-12 WAN
> >
>
> Ok, first off, there is really no fundamental difference between "SUA
> Only" and "Full Feature". "SUA Only" is in reality "Full Feature" with
> a special, "invisible" mapping. This mapping is invisible on the web
> configurator but can be seen, luckly, when telnetting to the firewall.
> After telnetting, select "NAT Setup" (option 15) and then "Address
> Mapping Sets" (option 1). Here, you can see two mapping sets:
> "NAT_SET" (option 1) and "SUA" (option 255). Select 255 and see what
> is the kinf of mapping SUA is using. Now, create under NAT_SET the
> exact same mapping and save the new config. If you now switch to "Full
> Feature", the router should work exactly as before when using "SUA
> Only".
>
> If you go back to the web configurator, you should see under "Address
> Mapping" the SUA mapping. To add the Many One-to-one mapping, select
> mapping rule 1 and click "Insert". You should now select the mapping
> "Many One-to-one" and provide the values 192.168.0.10-12 for Local
> Start and End IP, respectively, and 192.168.1.10-12 for Global Start
> and End IP, respectively.
>
> It should do what you want it to do.
- Next message: DaveW: "Re: IP address spoofing"
- Previous message: Rolleston: "Re: Kerio and .NET Applications"
- In reply to:(deleted message) shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Next in thread: shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Reply:(deleted message) shopping.nowthor.com: "Re: Zyxel ZyWall 10 router MADNESS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|