RAM-6021
RAM-6021M12
Web Browser
4.16 or higher
This document provides step by step procedures to set up communication between the WAN & LAN interfaces of a wired router to devices that do not have a default gateway set on the LAN interface using Network Address Translation (NAT) for One-to-One (1:1)
For example, a plant floor has a wired router at various locations. Each device behind the wired router has the same LAN subnet i.e. 192.168.10.0/24 and no default gateway set on any device. Remote access to devices in that LAN will be problematic since all traffic outside of that LAN’s subnet will get dropped due to the lack of a configured default gateway. This document solves that problem by using a combination of Aliases, NAT, and Masquerading.
Part 1 - Setup Eth0 & Eth1 Interface
In this example, we will use the following network setup. Edit where needed to fit your network topology.
o Eth1: 192.168.24.0/21
o Eth0: 192.168.10.0/24
Setup the RAM-6021 Interfaces:
Select Network - Interface - eth0 (WAN)
Select Network - Interface - eth1 (LAN)
Part 2 - Setup Alias on Eth0
- Go to Networking – Interfaces – eth0 (WAN)
- Click Add under Interface Aliases
Set the following:
o Sub-Interface: 10
o IP Address: Enter IP in same network as WAN. Example: 192.168.31.47
o Subnet Mask: Enter correct subnet. Example: 255.255.248.0
When done entering all information,
Click OK
Click Apply
To set the IP address on the RAM, choose either DHCP, if a DHCP server is available on the WAN side or enter a static IP and subnet mask for Eth0. This example uses DHCP and therefore the RAM will obtain an IP address dynamically from the available DHCP Server.
Part 3 - Setup NAT Rule
Go to Network – Firewall – Masquerade/NAT/DMZ Rules
Under NAT (One-To-One) Rules, click Add
Add the following Rule:
o Original Destination Address: Enter previously configured Alias. Ex. 192.168.31.47
o New Destination Address: Enter destination host IP on LAN side. Ex. 192.168.10.50
o Select Protocol: All
o Source network via Whitelist: default
Click OK
Click Apply
Note: For additional devices on LAN side, add additional NAT rules for those devices.
Part 4 - Setup Masquerade Rule
Here we set up masquerade rules to NAT the source subnet on the WAN side of Wired Router.
While on same screen as NAT rules, under Masquerade Rules, click Add
Enter the following:
o Original Source Subnet: Enter the WAN side’s network subnet. Ex. 192.168.24.0/21
o Interface: eth1
Click Finish
Click Apply
It is the customer's responsibility to review the advice provided herein and its applicability to the system. HMS makes no representation about specific knowledge of the customer's system or the specific performance of the system. HMS is not responsible for any damage to equipment or connected systems. The use of this document is at your own risk. Red Lion standard product warranty applies.
If you have any questions or trouble, contact HMS Technical Support by clicking here
For more information: https://www.hms-networks.com/product-warranty-and-return-policy
