NAT (Network Address Translation)
Masquerading
To set up masquerading:
- Firewall
- General Settings
Follow the menus. The Masquerading checkboxes in the table under Zones=>Forward on the incoming page can be configured. Masquerading hides the source IP address of data packets with the router's WAN IP address. The masquerading and MSS compression feature of the WAN interface must be enabled, but it should be disabled on the LAN interface.
Port Forwarding
To add a port forwarding rule:
- Firewall
- Port Forwards
Follow the menus. Port forwarding rules can assign a specific port number of the WAN network to a device belonging to the selected internal network.
| Parameter | Description | Default Value |
|---|---|---|
| Name | Name of the Rule | Null |
| Protocol | TCP+UDP/TCP/UDP | TCP+UDP |
| External zone | Wired WAN, 4G, VPN | wan |
| External Port | This can be a port or a range of ports, such as 8000-9000. When the external port is empty, it indicates a DMZ (Demilitarized Zone) function. | Null |
| Internal Zone | LAN Name | lan |
| Internal IP address | Router LAN IP address | Null |
| Internal Port | You specify a port or a range of ports, such as 8000-9000. However, when both the external port and internal port are empty, it indicates a DMZ (Demilitarized Zone) operation. | Null |
NAT DMZ
While port forwarding rules direct a specified WAN port to an internal network device, DMZ (Demilitarized Zone) rules direct all ports belonging to the WAN interface to an internal network device. DMZ rules are set in the port forwarding interface, and in DMZ mode, there is no need to set external and internal ports.
All ports belonging to the WAN address will be directed to the internal network device at 192.168.1.6.
- Port forwarding and DMZ cannot be used simultaneously.