Netgear SRX5308 SRX5308 Reference Manual - Page 41

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual Note the following about NAT: • The VPN firewall uses NAT to select the correct PC (on your LAN) to receive any incoming data. • If you have only a single public Internet IP address, you must use NAT (the default setting). • If your ISP has provided you with multiple public IP addresses, you can use one address as the primary shared address for Internet access by your PCs, and you can map incoming traffic on the other public IP addresses to specific PCs on your LAN. This one-to-one inbound mapping is configured using an inbound firewall rule. To configure NAT: 1. Select Network Configuration > WAN Settings from the menu. 2. Click the WAN Mode tab. The WAN Mode screen displays (see Figure 2-13 on page 2-19). 3. In the NAT (Network Address Translation) section of the screen select the NAT radio button. 4. Click Apply to save your settings. Configuring Classical Routing In classical routing mode, the VPN firewall performs routing, but without NAT. To gain Internet access, each PC on your LAN must have a valid static Internet IP address. If your ISP has allocated a number of static IP addresses to you, and you have assigned one of these addresses to each PC, you can choose classical routing. Or, you can use classical routing for routing private IP addresses within a campus environment. To learn the status of the WAN ports, you can view the Router Status screen (see "Viewing the System (Router) Status and Statistics" on page 9-10). To configure classical routing: 1. Select Network Configuration > WAN Settings from the menu. 2. Click the WAN Mode tab. The WAN Mode screen displays (see Figure 2-13 on page 2-19). 3. In the NAT (Network Address Translation) section of the screen select the Classical Routing radio button. 4. Click Apply to save your settings. Connecting the VPN Firewall to the Internet v1.0, April 2010 2-17