User`s manual

Industrial Secure Router User's Manual Network Address Translation
7-5
Interface (N-1 mode)
Setting Description Factory Default
Auto
WAN1
WAN2
Select the Interface for this NAT Policy Auto
The Industrial Secure Router provides a Dual WAN backup function for network redundancy. If the interface is
set to Auto, the NAT Mode is set to N-1, and the WAN backup function is enabled, the primary WAN interface
is WAN1. If the WAN1 connection fails, the WAN interface of this N-1 policy will apply to WAN2 and switch to
WAN2 for N-1 outgoing traffic until the WAN1 interface recovers.
IP Range
Setting Description Factory Default
IP address Select the Internal IP range for IP translation to WAN IP
address
None
WAN IP (N-1 mode)
Setting Description Factory Default
IP address The IP address of the user selected interface (WAN1, WAN2,
and Auto) in this N-to-1 policy.
None
Add a NAT Rule
Checked the “Enable” checkbox and input the correspondent NAT parameters in the page, and then click
“New/Insert” to add it into the NAT List Table. Finally, click “Activate” to activate the configuration.
Delete a NAT Rule
Select the item in the NAT List Table, then, click “Delete” to delete the item.
Modify a NAT Rule
Select the item in the NAT List Table. Modify the attributes and click “Modify” to change the configuration.
Activate NAT List Table
After adding/deleting/modifying any NAT Rules, be sure to Activate it.
NOTE
The
Industrial Secure Router will add an N-
1 policy from the source IP, 192.168.127.1 to 192.168.127.252 to
the WAN1 interface after activating the Factory Default.
Port Forward
If the initial connection is from outside the LAN, but the user still wants to hide the Internal IP address, one way
to do this is to use the Port Forwarding NAT function.
The user can specify the port number of an external IP address (WAN1 or WAN2) in the Port Forwarding policy
list. For example, if the IP address of a web server in the internal network is 192.168.127.10 with port 80, the
user can set up a port forwarding policy to let remote users connect to the internal web server from external IP
address 10.10.10.10 through port 8080. The Industrial Secure Router will transfer the packet to IP address
192.168.127.10 through port 80.
The Port Forwarding NAT function is one way of connecting from an external insecure area (WAN) to an internal
secure area (LAN). The user can initiate the connection from the external network to the internal network, but
will not able to initiate a connection from the internal network to the external network.