Skip to main content

Who can modify this feature?

  • Partner
  • Company/Network Admins with Write access
  • Meter Support

What is a 1:1 NAT, and the requirements?

A 1:1 NAT requires at least one additional static IP configured on your Meter Security Appliance’s WAN port (2 IPs total). See Hardware > Security Appliances > Ports. A 1:1 NAT is typically used to access a server on the local network via the public IP address. For example, if you have a secondary public IP of 12.12.11.11 and set up a 1:1 NAT with this IP to an internal host of 10.103.0.7 - ALL traffic destined for 12.12.11.11 will be forwarded to 10.103.0.7. This will allow 10.103.0.7 to act as if it were on the public internet.

A note on security with port forwards

By default, creating a 1:1 NAT will open up the internal host to ALL outside communication. To allow only certain hosts or ports, ACL rules must be made on the WAN port to ALLOW only certain traffic and DENY all else on the public IP used in the 1:1 NAT. Learn more about creating ACLs here: Firewall > ACLs.

How to add a 1:1 NAT

To configure a 1:1 NAT, log into the Meter Dashboard and navigate to Firewall > 1:1 NAT > Click on “Add 1:1 NAT rule”. This will expand the menu on the right-hand side of the screen.
1:1 NAT configuration interface
Fill in the following fields: Name - The display name for your NAT rule. Description - Used to describe the purpose of the rule. WAN Uplink - Select the WAN interface where a secondary IP is configured. External IP address - The secondary IP for the NAT rule. Internal IP address - The internal IP address that will receive the forwarded traffic. Once the rule is created, it will populate in the list:
1:1 NAT rules list
The rule can always be edited or disabled by clicking on the rule to expand the configuration window on the right-hand side of the screen. If a rule needs to be deleted, select the rule and use the ‘Delete’ button in the actions menu.
1:1 NAT deletion interface
If any assistance is required, please don’t hesitate to contact Meter Support!
I