DNA: Configuring a 1:1 NAT



This article describes how to configure a 1:1 NAT on your Datto Networking Appliance (DNA).


The Datto Networking Appliance allows you to map traffic from a pool of one or more external IP addresses to a static inbound (internal) IP address through the use of Network Address Translation (NAT). This allows you to run multiple services on the same port, such as some VoIP services and web servers.


To configure a 1:1 NAT on your DNA, perform the following steps.

Configure a Static IP Address

1. A 1:1 NAT requires a static IP address. In the GUI of the Datto Networking Appliance, click Manage. Then, click Edit on the WAN Port card of the interface that you will be assigning to a static IP address, as shown in Figure 1.

While you can select any WAN port on the device, Datto recommends that you use a secondary port in any situation where your primary WAN port needs to retain a DHCP assignment.

Figure 1: Manage page (click for larger image)


 2. In the Configured Networks pane, select Add next to the Static Address and Custom DNS fields for the interface you are configuring.

Figure 2: Configured Networks

3. On the WAN Port card, complete the Static Address and Custom DNS fields. The fields are:

Static Address

  • IP address: Allows you to specify the public IP address of your Datto Networking Appliance.
  • Additional IP Addresses (optional): Allows you to define additional public IP addresses for the appliance. Separate multiple IP addresses with a comma. This field is not required.
  • Subnet mask: This field allows you to define the Subnet mask for your networking environment.
  • Gateway: Defines the gateway address for your network environment.

Custom DNS

  • Nameservers: Allows you to customize the namesever that your Datto Networking Appliance should use for address resolution.
  • Search domain: Allows you specify your network's DNS search domain.

When you finish configuring the WAN port, click Save Changes, as shown in Figure 3.

Figure 3: WAN port configuration

4. Click the Security tab. Then, click 1 to 1 NAT.

Figure 4: Security configuration (click for larger image)

5. On the 1 to 1 NAT card, click Edit. Then, click Add Rule. Choose the Ingress IP (the inbound public IP you would like to forward). Then, enter the Destination IP (the IP address you would like to forward the Ingress IP to). You may specify multiple Ingress IP addresses by clicking Add Rule for each IP address you wish to forward. You can enable or disable forwarding to these IP addresses by checking the Enable box.

When you are finished configuring the 1:1 NAT, click Save Changes.

Figure 5: 1 to 1 NAT configuration



Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Calling all Partners! We want to hear your feedback! Please participate in this quick survey and help us build a better, more-relevant Knowledge Base!

Want to talk about it? Head on over to our Community Forum!