1-to-1 NAT maps a public Internet IP to an IP on your local area network (LAN).

If you did not select this module to be included during the installation process, you must first install the module.

You can map 1-to-1 NAT IPs in one of two ways:

• With no firewall at all
• With selective ports open

Some protocols can be finicky behind firewalls. In this case you want to configure 1-to-1 NAT with no firewall (make sure you firewall/secure the target LAN system some other way!). In the screenshot below:

• 216.138.245.23 is mapped to a LAN machine at 192.168.2.2
• no firewall is enabled.

1-to-1 NAT Wide Open

In the screenshot below:

• 216.138.245.23 is mapped to an LAN machine at 192.168.2.2
• only port 22 (SSH) and port 80 (web) are accessible

1-to-1 NAT By Port

If you have Multi-WAN enabled, please review the topic on source-based routes. Each 1-to-1 NAT rule must typically be assigned to an external MultiWAN interface as shown by example below:

1-to-1 NAT with MultiWAN