31
edits
Changes
mLine 1:
Line 1: − = 1-to-1 NAT Configuration for RUTX Devices = − + + + + + Line 11:
Line 14: − + Line 30:
Line 33: + + + + + + + + + + + + + + + + Line 46:
Line 65: − +
Updated article to reflect changes to the latest Firmware Version
== Introduction ==
== Introduction ==
1-to-1 NAT is a mode of NAT which maps one external address to one internal address. This article contains step-by-step instructions on how to configure a 1-to-1 NAT between a LAN device and a WAN interface on RUTX devices. This setup can be useful for applications such as exposing email servers to the internet, while preserving private communication in the LAN network.
1-to-1 NAT is a mode of NAT which maps one external address to one internal address. This article contains step-by-step instructions on how to configure a 1-to-1 NAT between a LAN device and a WAN interface on RUTX devices. This setup can be useful for applications such as exposing email servers to the internet, while preserving private communication in the LAN network.
<span style="color: red;">The information in this page is updated in accordance with the <i><b>R_00.07.02.1</b></i> firmware version.</span>
----If you're having trouble finding this page or some of the parameters described here on your device's WebUI, you should '''turn on "Advanced WebUI" mode'''. You can do that by clicking the "Basic" button under "Mode", which is located at the top-right corner of the WebUI.
[[File:Networking rutx manual webui basic advanced mode v1.gif|frameless|1102x1102px]]
== Prerequisites ==
== Prerequisites ==
== Configuration Scheme ==
== Configuration Scheme ==
[[File:1-to-1 NAT Configuration Diagram.png|border|center|1102x1102px]]
[[File:1-to-1 NAT Configuration Diagram Updated.png|alt=|border|center|1102x1102px]]
== Overview ==
== Overview ==
* Router's WAN IP address: 192.168.2.1/24
* Router's WAN IP address: 192.168.2.1/24
* Computer's IP address: 192.168.2.2/24
* Computer's IP address: 192.168.2.2/24
In order to edit the WAN IP address of the device, you will need to go to '''Network → Interfaces''' and then click on the '''Edit''' [[File:Networking rutx manual edit button v1.png|frameless]] button for the '''WAN''' connection.
[[File:Network Interfaces WAN Edit.png|frameless|1100x1100px]]
After clicking on '''Edit''', a new window will open. Here, you will need to click on '''DHCP''' as shown in point 1, and then click on '''Static''', as shown in point 2.
[[File:DHCP to Static.png|frameless|1062x1062px]]
Next, you will need to fill out the IP address fields, first, with the IP address '''192.168.2.1''' and the netmask '''255.255.255.0'''.
[[File:Entering IP addresses.png|frameless|1045x1045px]]
Then finally, click on the [[File:Save & Apply Button.png|frameless]] button to save the changes.
Once you have set up the IP addresses for the devices, you can continue over to the next step.
Once you have set up the IP addresses for the devices, you can continue over to the next step.
iptables -t nat -I PREROUTING -d [ROUTER'S_WAN_IP] -j DNAT --to-destination [SERVER'S_LAN_IP]
iptables -t nat -I PREROUTING -d [ROUTER'S_WAN_IP] -j DNAT --to-destination [SERVER'S_LAN_IP]
iptables -t nat -I POSTROUTING -s [SERVER'S_LAN_IP] -j SNAT --to-source [ROUTER'S_WAN_IP]
iptables -t nat -I POSTROUTING -s [SERVER'S_LAN_IP] -j SNAT --to-source [ROUTER'S_WAN_IP]
After saving and applying the rules, the end-user should be able to reach the LAN device when trying to connect to the WAN interface, which in this case is 192.168.2.1, trough every port available.
After saving and applying the rules, the end-user should be able to reach the LAN device when trying to connect to the WAN interface, which in this case is 192.168.2.1, through every port available.
