Moxa EDR-810-VPN-2GSFP [101/139] Bidirectional 1 to 1 nat

Industrial Secure Router User's Manual Network Address Translation

7-4

LAN/DMZ IP (1-1 NAT type)

Setting Description Factory Default

IP Address Select the Internal IP address in LAN/DMZ network area None

WAN IP (1-1 NAT type)

Setting Description Factory Default

IP Address Select the external IP address in WAN network area None

Bidirectional 1-to-1 NAT

For some applications, devices need to talk to both internal devices and external devices without using a

gateway. Bidirectional 1-to-1 NAT can do Network Address Translation in both directions without a gateway.

NOTE

The

Industrial Secure Router

can obtain an IP address via DHCP or PPPoE. However, if this dynamic IP address

is the same as the WAN IP for 1

-to-1 NAT, then the 1-to-1 NAT function will not work. For this reason, we

recommend disabling the DHCP/PPPoE function when using the 1

-to-1 NAT function.

N-to-1 NAT

If the user wants to hide the Internal IP address from users outside the LAN, the easiest way is to use the

N-to-1 (or N-1) NAT function. The N-1 NAT function replaces the source IP Address with an external IP address,

and adds a logical port number to identify the connection of this internal/external IP address. This function is

also called “Network Address Port Translation” (NAPT) or “IP Masquerading.”

The N-1 NAT function is a one-way connection from an internal secure area to an external non-secure area. The

user can initialize the connection from the internal to the external network, but may not be able to initialize the

connection from the external to the internal network.