Setting up a NAT Rule on a Nebula Security Gateway (Port Forwarding)

This video will explain step-by-step how to configure a NAT rule, also known as Port Forwarding, on your Zyxel NSG device. By following these steps you are able to set up a port forwarding (NAT-rule) that would allow you to access services in the internal network behind the Nebula Security Gateway (NSG) from the internet:

1. Log in to nebula.zyxel.com
2. Choose the organization and site where you want to set up the NAT-rule on
3. Navigate to
   

   Gateway > Configuration > Firewall, 

   scroll down to

   “NAT” 

   and click

   “Add” 

   on the

   "Virtual Server" 

   rules
4. Choose the desired WAN port under “Uplink”, enter the “Public IP” of the network, a “Public port”, the “LAN IP” of the internal server and the “Local Port” to which this request should be forwarded to
5. Click ”Save”

Please note: Unlike other Zyxel devices (e.g. USG series) you don´t need to create a firewall rule in Nebula, as this will be automatically done while creating the NAT rule.

Also interesting:
Do you want to have a look directly on one of our test devices? Have a look here in our virtual Lab:

Virtual Lab - Nebula Basic