DMZ Static NAT - Revision history

WFilter: /* Static NAT */

2022-05-06T08:00:16Z

‎Static NAT

WFilter at 07:58, 6 May 2022

2022-05-06T07:58:56Z

WFilter: /* Port Forwarding */

2019-07-09T08:30:56Z

‎Port Forwarding

WFilter: /* Port Forwarding */

2018-10-25T10:07:33Z

‎Port Forwarding

WFilter: /* Port Forwarding */

2018-01-22T14:23:28Z

‎Port Forwarding

WFilter: /* Port Forwarding */

2018-01-22T14:23:05Z

‎Port Forwarding

WFilter at 15:10, 24 May 2017

2017-05-24T15:10:42Z

WFilter: Created page with "{{DISPLAYTITLE:DMZ and Static NAT}} = Introduction = Though "DMZ" and "Static NAT" both can publish local network services, they have differences: * "DMZ" equals "port forwar..."

2016-04-19T09:39:34Z

Created page with "{{DISPLAYTITLE:DMZ and Static NAT}} = Introduction = Though "DMZ" and "Static NAT" both can publish local network services, they have differences: * "DMZ" equals "port forwar..."

New page

{{DISPLAYTITLE:DMZ and Static NAT}}

= Introduction =
Though "DMZ" and "Static NAT" both can publish local network services, they have differences:
* "DMZ" equals "port forwarding on all ports". Visits to WAN interfaces will be redirected to the DMZ host(except of the excepted ports). Usually, you shall have ONE DMZ host.
* "Static NAT" provides one-to-one NAT for local hosts. When you have multiple static public ip addresses, you can publish different services on every public ip. For example, "3 public ip addresses, IP1 for internet access, IP2 for web server, IP2 for FTP server."

So,
* If you don't have a static public IP, you shall use "port forwarding" or "DMZ" to publish local network services.
* If you have multiple static public IP addresses, you're recommended to add "Static NAT" rules for service publishing.

= Forwarding and DMZ =
* Forwarding: map a WAN port to local host.
[[File:port_forward01.png|900px]]

* DMZ: port forwarding on all ports.
[[File:dmz01.png|800px]]

= Static NAT =

You need to define "Local IP" and choose a public IP.

[[File:nat01.png|900px]]

[[Category:Firewall]]

@@ Line 33: / Line 33: @@
 [[File:nat01.png|900px]]
-** Single: a single IP(192.168.10.100) or subnet(192.168.10.0/24).
+* Single: a single IP(192.168.10.100) or subnet(192.168.10.0/24).
-** Range: an IP range.
+* Range: an IP range.
 [[Category:Firewall]]

@@ Line 18: / Line 18: @@
 ** Target Port: "redirected to" port, leave it blank for same as the source port.
 ** NAT Reflection: enable or disable NAT reflection.
 = DMZ =

@@ Line 17: / Line 17: @@
 ** Target IP: "redirected to" local host IP.
 ** Target Port: "redirected to" port, leave it blank for same as the source port.
 = DMZ =

@@ Line 9: / Line 9: @@
 = Port Forwarding =
 [[File:port_forward01.png|900px]]
 ** Type: if type is "all", "source port" and "target port" shall be blank.
 ** WAN: target WAN IP address.

@@ Line 9: / Line 9: @@
 = Port Forwarding =
-* Forwarding: map a WAN port to local host.
+* Forwarding: map a WAN port, port range or all traffic to a local host.
 [[File:port_forward01.png|900px]]
 ** WAN: target WAN IP address.
 ** Source Port: target port to the WAN interface.

@@ Line 23: / Line 23: @@
 * DMZ: port forwarding on all ports.
 [[File:dmz01.png|800px]]
 = Static NAT =
-You need to define "Local IP" and choose a public IP.
+* On "WAN" zone, this rule can translate local traffic to a WAN ip address.
 [[File:nat01.png|900px]]
 ** Single: a single IP(192.168.10.100) or subnet(192.168.10.0/24).
 ** Range: an IP range.
 [[Category:Firewall]]

@@ Line 1: / Line 1: @@
-{{DISPLAYTITLE:DMZ and Static NAT}}
+{{DISPLAYTITLE:Forwarding, DMZ and Static NAT}}
 = Introduction =
-So,
+"Port Forwarding", "DMZ" and "Static NAT" are all redirecting firewall rules.
-* If you don't have a static public IP, you shall use "port forwarding" or "DMZ" to publish local network services.
+* "Port Forwarding" : forword packets on certain port(s).
-* If you have multiple static public IP addresses, you're recommended to add "Static NAT" rules for service publishing.
+* "DMZ" equals "port forwarding on all ports". Visits to WAN interfaces will be redirected to the DMZ host(except of the excepted ports).
-= Forwarding and DMZ =
+= Port Forwarding =
 * Forwarding: map a WAN port to local host.
 [[File:port_forward01.png|900px]]
 * DMZ: port forwarding on all ports.
@@ Line 22: / Line 26: @@
 [[File:nat01.png|900px]]
 [[Category:Firewall]]