Users Manual Part 2
Client IP Addressing
NAT Mode
In NAT mode, the EnGenius APs run as DHCP servers to assign IP addresses to wireless
clients out of a private 172.x.x.x IP address pool behind a NAT.
NAT mode should be enabled when any of the following is true:
W
i
r
e
l
e
ss
c
l
i
e
n
t
s
a
ss
oc
i
a
t
e
d
t
o
t
h
e
SS
I
D
o
n
l
y
r
e
qu
i
r
e
I
n
t
e
r
n
e
t
a
cc
e
ss
,
n
o
t
a
cc
e
ss
t
o
l
oc
a
l
wired or wireless resources.
There is no DHCP server on the LAN that can assign IP addresses to the wireless clients.
Th
e
r
e
i
s
a
DHC
P
s
e
r
ve
r
o
n
t
h
e
L
AN
,
bu
t
i
t
d
o
e
s
n
o
t
ha
ve
e
n
o
u
g
h
I
P
add
r
e
ss
e
s
t
o
a
ss
i
g
n
to wireless clients
The implications of enabling NAT mode are as follows:
1.
No NAT client can be talked to the other NAT client, neither same SSID nor different
SSID (client isolation enabled and block internal routing)
2.
Change the IP range of CP DNS to be same as AP DNS (172.16-23.0.0/16)
Use Cases
NAT mode works well for providing a wireless guest network since it puts clients on a
private wireless network with automatic addressing.
Diagram
Wh
e
n an
SS
I
D
i
s
co
n
fi
g
u
r
e
d
i
n
NA
T
M
o
d
e
,
w
i
r
e
l
e
ss
c
l
i
e
n
t
s
w
i
ll
p
o
i
n
t
t
o
t
h
e
a
cc
e
ss
p
o
i
n
t
a
s
their DNS server. The AP then acts as a DNS proxy and will forward clients' DNS queries to
its configured DNS server.