User`s manual

EDR-G903/G902 Features and Functions
3-29
Enable/Disable NAT Policy
Setting Description Factory Default
Enable or Disable Enable or disable the selected NAT policy Enabled
NAT Mode
Setting Description Factory Default
N-1
1-1
Port Forwarding
Select the NAT types N-1
Interface (N-1 mode)
Setting Description Factory Default
Auto
WAN1
WAN2
Select the Interface for this NAT Policy Auto
The EtherDevice Router provides a Dual WAN backup function for network redundancy. If the interface is set to
Auto, the NAT Mode is set to N-1, and the WAN backup function is enabled, the primary WAN interface is WAN1.
If the WAN1 connection fails, the WAN interface of this N-1 policy will apply to WAN2 and switch to WAN2 for
N-1 outgoing traffic until the WAN1 interface recovers.
IP Range
Setting Description Factory Default
IP address Select the Internal IP range for IP translation to WAN IP
address
None
WAN IP (N-1 mode)
Setting Description Factory Default
IP address The IP address of the user selected interface (WAN1, WAN2,
and Auto) in this N-to-1 policy.
None
NOTE
The EtherDevice Router will add an N-
1 policy from the source IP, 192.168.127.1 to 192.168.127.252 to the
WAN1 interface after activating the Factory Default.
Port Forwarding
If the initial connection is from outside the LAN, but the user still wants to hide the Internal IP address, one way
to do this is to use the Port Forwarding NAT function.
The user can specify the port number of an external IP address (WAN1 or WAN2) in the Port Forwarding policy
list. For example, if the IP address of a web server in the internal network is 192.168.127.10 with port 80, the
user can set up a port forwarding policy to let remote users connect to the internal web server from external IP
address 10.10.10.10 through port 8080. The EtherDevice Router will transfer the packet to IP address
192.168.127.10 through port 80.
The Port Forwarding NAT function is one way of connecting from an external insecure area (WAN) to an internal
secure area (LAN). The user can initiate the connection from the external network to the internal network, but
will not able to initiate a connection from the internal network to the external network.