Configuring Classical Routing - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

Note the following about NAT:
• The VPN firewall uses NAT to select the correct PC (on your LAN) to receive any incoming
data.
• If you have only a single public Internet IP address, you must use NAT (the default setting).
• If your ISP has provided you with multiple public IP addresses, you can use one address as the
primary shared address for Internet access by your PCs, and you can map incoming traffic on
the other public IP addresses to specific PCs on your LAN. This one-to-one inbound mapping
is configured using an inbound firewall rule.
To configure NAT:
1. Select Network Configuration > WAN Settings from the menu.
2. Click the WAN Mode tab. The WAN Mode screen displays (see
3. In the NAT (Network Address Translation) section of the screen select the NAT radio button.
4. Click Apply to save your settings.

Configuring Classical Routing

In classical routing mode, the VPN firewall performs routing, but without NAT. To gain Internet
access, each PC on your LAN must have a valid static Internet IP address.
If your ISP has allocated a number of static IP addresses to you, and you have assigned one of
these addresses to each PC, you can choose classical routing. Or, you can use classical routing for
routing private IP addresses within a campus environment.
To learn the status of the WAN ports, you can view the Router Status screen (see
System (Router) Status and Statistics" on page
To configure classical routing:
1. Select Network Configuration > WAN Settings from the menu.
2. Click the WAN Mode tab. The WAN Mode screen displays (see
3. In the NAT (Network Address Translation) section of the screen select the Classical Routing
radio button.
4. Click Apply to save your settings.
Connecting the VPN Firewall to the Internet
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
v1.0, April 2010
9-10).
Figure 2-13 on page 2-19).
"Viewing the
Figure 2-13 on page 2-19).
2-17