[FAQ ID: 381]Setting up One-to-One NAT on TP-LINK Router

Cocok untuk: TL-ER5120, TL-ER6020, TL-ER604W, TL-ER6120, TL-R480T+

One-to-One NAT (Network Address Translation) creates a one-to-one mapping between a valid public
IP address and a private IP address of a local host.
For example, you have an Internet connection whose connection type is Static IP, the ISP provides you an IP
block from 123.1.1.2 to 123.1.1.6, subnet mask is 255.255.255.248 and gateway is 123.1.1.1. Then you can use
one of them, for instance, 123.1.1.2 on WAN interface of the router and map each of the others to an individual
host in your local network by setting up One-to-One NATentries.

Step 1: Click on Network--WAN, select Static IP as Connection Type, fill in the information provided by your
ISP (In this example we use 123.1.1.2 as WAN IP address). Then Click on Save.


Step 2: Click on Advanced--NAT--One-to-One NAT, enter the IP address of the internal host before ->, and
the mapped public IP address after ->, choose the corresponding WAN interface. Select Activate and click
on Add.
Enable DMZ Forwarding if you want the internal host to be accessible from the Internet, for example, the
internal host is a WEB server that should be available on the Internet. Otherwise, keep it Disable.


Step 3: Add other One-to-One NAT entries, and you can view information of the entries on the List of Rules.


Now, the work is finished. The outgoing packets from the internal hosts which have a matched One-to-One entry
will be translated refer to the one-to-one rule (source IP address be translated to the mapped public IP address).
However, source IP address of outgoing packets from other hosts will be translated to the IP address on the
WAN interface of the router.
NOTE:
1. One-to-One NAT take effect only when the connection type of WAN is Static IP.
2. If you have multiple WANs used on the router, to make One-to-One NAT function, you need to set
up policy routing also. For example, for the 1st entry in this article, you need to add a policy routing
entry to make the packets whose source IP address is 192.168.0.100 to be forwarded by WAN 1 (the
WAN interface chose in One-to-One NAT entry). For more information about policy routing set up,
please refer to FAQ 530 at this link:
http://www.tp-link.com/en/article/?faqid=530.