Which port is required to map the intranet address of the VCN3000 (deployed on the intranet) to the extranet to enable cameras to connect to the VCN3000 through ONVIF?
Configure a source NAT policy with the source and destination security zones being the security zone where the users and intranet servers reside to translate source IP addresses of intranet users into a public address. Then configure a server static mapping policy to translate the destination addresses of packets destined for the public address of the servers into private addresses.
Configuring intranet users to access a public address on the USG6000 as follows:
Search for Example for Configuring NAPT for Intranet Users to Access the Internet in USG6000 Product Documentation.
Configuring intranet users to access a public address on the USG2000/5000 as follows:
Search for Example for Configuring Address Pool-based NAPT and NAT Server in USG2000/5000 Product Documentation.
If you have more questions, you can seek help from following ways: