Setting up One-to-One NAT on TP-LINK Router

[FAQ ID: 381]Setting up One-to-One NAT on TP-LINK Router

Suitable for: TL-ER5120, TL-ER6020, TL-ER604W, TL-ER6120, TL-R480T+


One-to-One NAT (Network Address Translation) creates a one-to-one mapping between a valid public IP address and a private IP address of a local host.
For example, you have an Internet connection whose connection type is Static IP, the ISP provides you an IP block from to, subnet mask is and gateway is Then you can use one of them, for instance, on WAN interface of the router and map each of the others to an individual host in your local network by setting up One-to-One NAT entries.
Step 1: Click on Network--WAN, select Static IP as Connection Type, fill in the information provided by your ISP (In this example we use as WAN IP address). Then Click on Save.
Step 2: Click on Advanced--NAT--One-to-One NAT, enter the IP address of the internal host before "->", and the mapped public IP address after "->", choose the corresponding WAN interface. Select Activate and click on Add.
Enable "DMZ Forwarding" if you want the internal host to be accessible from the Internet, for example, the internal host is a WEB server that should be available on the Internet. Otherwise, keep it "Disable".
Step 3: Add other One-to-One NAT entries, and you can view information of the entries on the List of Rules.
Now, the work is finished. The outgoing packets from the internal hosts which have a matched One-to-One entry will be translated refer to the one-to-one rule (source IP address be translated to the mapped public IP address). However, source IP address of outgoing packets from other hosts will be translated to the IP address on the WAN interface of the router.
  1. One-to-One NAT take effect only when the connection type of WAN is Static IP.
  2. If you have multiple WANs used on the router, to make One-to-One NAT function, you need to set up policy routing also. For example, for the 1st entry in this article, you need to add a policy routing entry to make the packets whose source IP address is to be forwarded by WAN 1 (the WAN interface chose in One-to-One NAT entry). For more information about policy routing set up, please refer to FAQ 530 at this link:

Copyright © 2015 TP-LINK Technologies Co., Ltd. All rights reserved.


المشاركات الشائعة