Storm season is back, bringing with it the potential for significant weather events. If you have clients in areas prone to infrastructure disruption, visit the Disaster Recovery Resources guide for preparedness information. Datto recommends performing proactive disaster recovery testing to mitigate potential downtime. See our articles about the importance of disaster recovery testing and Preparing For A Cloud Virtualization Test: Policies, Procedures, And Partner Responsibilities to learn more. For live updates, follow @datto on Twitter.

DNA: Configuring a 1 to Many NAT



This article describes how to configure the 1 to Many NAT feature on your Datto Networking Appliance (DNA).


  • Datto Networking Appliance (DNA)


The Datto Networking Appliance allows you the ability to configure port-forwards from multiple IP addresses so that you can accommodate many internal hosts. This allows more port-forwards than IP addresses.

A 1 to Many NAT requires a static IP address. While you can select any WAN port on the device, Datto recommends that you use a secondary port in any situation where your primary WAN port needs to retain a DHCP assignment.


1. To configure a 1 to Many NAT on your DNA, log into the DNA web interface, and click Networks, as shown in Figure 1.

Figure 1: Networks

2. Once on the Networks page, in the left-hand sidebar, click the Add button next to the Custom DNS option of your selected port. The following examples use WAN Port 2.

3. On the WAN Port card, configure the Static Address values for your environment.

4. Configure the WAN port's DNS settings.

5. Click Save Changes.

You must configure DNS for the WAN port and save the changes before attempting to add any additional public IP addresses.

Figure 2: Configuring WAN port settings

6. Click the Security tab, followed by 1 to Many NAT.

Figure 3: Firewall → 1 to Many NAT

4. Click the Ingress IP for each address configured on the port that you want to create rules for. Then, click New Rule.

Figure 4: Ingress IP configuration

5. Configure your NAT rules as desired. The options are: 

  • Name: Specify a name for the NAT rule
  • Incoming Port(s): Choose Single or Range from the dropdown, and specify the port range
  • Protocol: Select TCPUDP, or Both 
  • Destination IP: Specify the destination IP to forward the connection to.
  • Port: Specify the port to forward the connection to.

Figure 5: NAT rule configuration

6. You can create multiple rules per ingress IP, and specify up to 4 ingress IPs per port. When you are finished creating rules, click Save Changes. Your DNA will display a summary of your port configuration, as shown in Figure 6.

Figure 6: NAT rule configuration summary

Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Head on over to our Community Forum!