ZyXEL Communications ZYWALL 35 - Page 140

ZyWALL 35 Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
140
policy.
Check the “Active” checkbox in the “Virtual Address Mapping Rule” block to enable NAT over IPSec.
You can decide the amount of IP addresses for NAT (Network Address Translation) from the “Type”
drop-down menu. In this example, we want to NAT all the IP addresses of the subnet. Therefore we select
"Many One-to-One”. Enter the subnet range in the “Private Starting IP Address” field and “Private
Ending IP Address” field. Note: “Private IP address” represents the original IP address of the Local Area
Network.
In the “Virtual Starting IP Address” field, we specify the new IP address after NAT.
In the figure above, the Virtual IP address is specified starting from 172.16.2.1 to 172.16.2.254 on
ZyWALL 1.