How to configure One-to-One NAT on Safestream routers using the new GUI

One-to-One NAT (Network Address Translation) creates a one-to-one mapping between a valid public IP address and a private IP address of a local host. It is mainly used when there are two or more available public IPs, and these public IPs should be used on the same WAN port.

For example, the ISP provides a company with two public IP addresses: 123.1.1.2 and 123.1.1.3, and the company has two requirements:

• All the hosts in the private network can access the internet.
• The server can be visited from the internet.

In this case, you can configure 123.1.1.2 as the IP address of the WAN port, and configure One-to-One NAT to map the server’s IP address to 123.1.1.3. So all the computers can access the internet and the server can be visited from the internet using the public IP address.

Step 1:

Go to Network > WAN > WAN1 to configure WAN1 port. Select the connection type as Static IP, and input the IP address, Subnet Mask, Default Gateway and other information provided by the ISP. This IP address is used by the hosts in the private work to access the internet.

Note: One-to-One NAT only takes effect when the connection type of the corresponding WAN port is Static IP.

Step 2:

Go to Transmission > NAT > One-to-One NAT to create a One-to-One NAT entry for the server. Here we map the server’s IP address 192.168.0.200 to the public IP address 123.1.1.3.

Note: With DMZ Forwarding enabled, the hosts from the internet can visit the web server using the public IP address 123.1.1.3.