Nebula CC - Configure NAT Rule on your firewall(Port Forwarding)

This video will explain step-by-step how to configure a NAT rule, also known as Port Forwarding, on your Zyxel NSG device. By following these steps you are able to set up a port forwarding (NAT-rule) that would allow you to access services in the internal network behind the Nebula gateway from the internet: 

1. Log in to nebula.zyxel.com
2. Choose the organization and site where you want to set up the NAT-rule on
3. Navigate to
   

   Site-wide -> Configure -> Firewall -> NAT

   and click

   “Add” 

   on the

   "Virtual Server" 

   rules
4. Choose the desired:
   a) WAN port under “Uplink”,
   b) enter the “Public IP” of the network,
   c) a “Public port” used for clients connecting to the server (e.g. 11.22.33.44:3889),
   d) the “LAN IP” of the internal server
   e) the “Local Port” to which this request should be forwarded to (e.g. 443) and;
   f) the allowed Remote IPs (trusted source IPs that users are connecting from)
5. Click ”Save”

Please note: Unlike other Zyxel devices (e.g. USG series) you don´t need to create a firewall rule in Nebula, as this will be automatically done while creating the NAT rule.
Also note that NAT is supported in Nebula and used to forward packets to internal network devices. SNAT, however, is not yet supported in Nebula [2023], where you can choose for devices to go out of desired WAN IPs. 

Also interesting:
Do you want to have a look directly on one of our test devices? Have a look here in our virtual Lab:

Virtual Lab - Nebula Basic