RAM-6021 Network Address Translation (NAT)

06 Jun 2025

Subject

Set up a Wired Router to get access to devices on the LAN side that do not have a default gateway set using Network Address Translation (NAT) for One-to-One (1:1)

Products

RAM-6021

RAM-6021M12

Required Software

Web Browser

Required Firmware

4.16 or higher

Abstract:
This document provides step by step procedures to set up communication to the LAN side of a wired router to devices that do not have a default gateway. For example, a plant floor has a wired router at various locations. Each device behind the wired router has the same LAN subnet i.e. 192.168.10.0/24 and no default gateway set on any device. Remote access to devices in that LAN will be problematic since all traffic outside of that LAN’s subnet will get dropped due to the lack of a configured default gateway. This document solves that problem by using a combination of Aliases, NAT, and Masquerading.

 

Part 1 - Setting up Alias on Eth0

In this example, we will use the following setup:
o WAN: 192.168.24.0/21,
o LAN: 192.168.10.0/24


Edit where needed to fit your network topology.


- Go to Networking – Interfaces – eth0 (WAN)

- Click Add under Interface Aliases

 

Set the following:


o Sub-Interface: 10

o IP Address: Enter IP in same network as WAN. Example: 192.168.31.47

o Subnet Mask: Enter correct subnet. Example: 255.255.248.0

Click OK


Note: For additional devices on the LAN side, add additional Aliases for those devices

 

mceclip0.png
To set the IP address on the RAM, choose either DHCP, if a DHCP server is available on the WAN side or enter a static IP and subnet mask for Eth0. This example uses DHCP and therefore the RAM will obtain an IP address dynamically from the available DHCP Server.


mceclip2.png

When done entering all information, click Apply

 

Part 2 - Setting up NAT Rule

Go to Network – Firewall – Masquerade/NAT/DMZ Rules
Under NAT (One-To-One) Rules, click Add


Add the following Rule:

o Original Destination Address: Enter previously configured Alias. Ex. 192.168.31.47
o New Destination Address: Enter destination host IP on LAN side. Ex. 192.168.10.50
o Select Protocol: All
o Source network via Whitelist: default

Click OK
Click Apply

Note: For additional devices on LAN side, add additional NAT rules for those devices.

mceclip3.png

Part 3 - Setting up Masquerade Rule
Here we set up masquerade rules to NAT the source subnet on the WAN side of Wired Router.
While on same screen as NAT rules, under Masquerade Rules, click Add

Enter the following:
o Original Source Subnet: Enter the WAN side’s network subnet. Ex. 192.168.24.0/21
o Interface: eth1
Click Finish
Click Apply

 mceclip4.png