D-Link DRO-210i manual NAT Exception, Virtual Server/NAPT

Network Address Translation

Consider a scenario where WAN1 is used for internet connectivity. NAT must be enabled at WAN1 to enable LAN systems to access the internet. The company’s servers (Web/FTP Server) may be installed at the DMZ interface using public IP Address for direct access from the internet. NAT should not affect the traffic between DMZ and WAN1, because DMZ systems are already using public/global IP Addresses. In this case, NAT can be disabled between DMZ and WAN1.

Say WAN2 Port is used to connect some PCs or IP Phones with global IP Addresses. In this case, NAT is required only for traffic between LAN and WAN1. NAT can be disabled between WAN2 and WAN1 since WAN2 systems already use global IP Addresses.

Select NAT → NAT Exception to configure the NAT Exception as explained below.

Web UI

NAT Exception

NAT between	Select Disable to deactivate NAT between WAN1 and WAN2.
WAN1 and WAN2
NAT between	Select Disable to deactivate NAT between WAN1 and DMZ.
WAN1 and DMZ
NAT between	Select Disable to deactivate NAT between WAN2 and DMZ.
WAN2 and DMZ

6.2 Virtual Server

Virtual Servers use NAPT (Network Address and Port Translation) to allow remote users access certain special services on the LAN, such as FTP server for file transfer and STMP or POP3 for e-mail. The administrator configures the Global IP address, TCP or UDP protocol and port number used to access the Server. The router redirects requests from the remote clients to the Internal Server running the specified service on the LAN, by translating the Global IP/Port to the Private IP/Port of the end server.

Select NAT → Virtual Server/NAPT to configure the Virtual Server/NAPT as explained below.

Web UI

Virtual Server/NAPT

Interface Name Select the interface on which the virtual server is to be configured.

Transport Type Select the transport protocol (TCP or UDP) that the application on the virtual server will use for its connections. The transport type is dependent on the application that is providing the service. This is mostly used for non-standard cases where the port numbers are defined by the administrator.

Dlink DRO-210i User Guide 33