How to configure Ewon Edge for NAT1:1

This article explains how to configure a 1:1 NAT rule on an Ewon Edge gateway so that a specific device on the LAN can be reached by using an IP address on the WAN network.

A 1:1 NAT rule associates a WAN-side IP address with the actual LAN IP address of the target device.

Important: The IP addresses shown in the screenshots are examples only. Use addresses that are appropriate for your WAN and LAN networks.

Before configuring the rule, have the following information available:

• Access to the appropriate Ewon Edge gateway in Ewon Cloud: Ewon Cloud
• The WAN-side IP address that will be used to reach the LAN device.
• The actual LAN IP address of the target device.
• Any required source port, destination port, or transport protocol restrictions.

Configure the 1:1 NAT rule

1. In Ewon Cloud, open the Ewon Edge gateway on which the 1:1 NAT rule will be configured.
2. Navigate to Gateway > Security & networking.

3. In the Networks section, review the configured network segments and identify:

   • The network with the WAN type.
   • The WAN network’s current IP assignment and address information.
   • The network with the LAN type that contains the target device.
   • The LAN network’s address information.

   Take note which interfaces are available and the IP addresses associated with them.

   Figure 1. Review the WAN and LAN network segments under Security & networking

   

    

4. Scroll to the 1:1 NAT Rules section.

5. Review any message displayed above the rules list.

   If the WAN network uses DHCP, Ewon Cloud may display the following warning:

   The gateway’s WAN network is configured to use DHCP. Some source IP addresses used by 1:1 NAT rules may conflict with other WAN IP addresses.

   Consider this warning when choosing the Source IP. Confirm that the selected address is appropriate for the WAN network and does not create the conflict described by the interface. You can create an exclusion zone on your DHCP server to set aside some IP addresses that are reserved for static use cases such as this.

6. Select Add rule.

   Figure 2. The 1:1 NAT Rules section, including the DHCP warning and Add rule button.

   

    

7. In Rule name, enter a descriptive name that identifies the device or purpose of the rule.

8. Under Networks, configure the WAN side of the rule:

   1. Set Source network to the gateway’s WAN network.
   2. In Source IP, enter the WAN-side IP address that will be used to reach the LAN device.

   Note: The term Source IP refers to the address available on the selected WAN network. It does not refer to the IP address of the device initiating the connection. This address will get mapped to your LAN device, it will need to be an unused address on your WAN network.

9. Configure the LAN side of the rule:

   1. Set Destination network to the LAN network containing the target device.
   2. In Destination IP, enter the actual LAN IP address of the target device.

   Important: The Destination IP must identify the intended device on the selected LAN network. Do not copy an example address from this article.

10. If the application requires port or protocol restrictions, configure the applicable fields:

    • Source port
    • Destination port
    • Transport protocol

    If the application does not require a specific port or transport protocol, leave these optional fields unconfigured where the interface permits.

    Figure 3. Configure the rule name, source and destination networks, IP addresses, and any required port or transport protocol restrictions.

    

     

11. Review the rule carefully:
    • Source network identifies the WAN network.
    • Source IP is the WAN-side address used to reach the device.
    • Destination network identifies the LAN containing the device.
    • Destination IP is the device’s actual LAN address.
12. Select Save to add the rule.
13. On the Security & networking page, select Apply to apply the pending configuration.
14. Reboot the Ewon Edge gateway for the configuration to take effect.

Result

After the configuration has been saved, applied, and the Ewon Edge gateway has rebooted, the 1:1 NAT rule associates the configured Source IP on the WAN network with the configured Destination IP on the LAN network.

The rule appears in the 1:1 NAT Rules list, where its source network, source IP, destination network, destination IP, protocol, and available actions can be reviewed.

You can now reach your LAN device on that WAN address. In this example, we are able to reach the N-Tron switch's web interface even though we are not on the same network.