Accepted Disable NAT on the routers (i.e. TL-ER605 and TP-Link TL-ER7206)
Team,
Suggestion (assuming this is not possible within the current firmware):
Allow customers to operate the router without using NAT.
Meaning allow the device to behave as a special router with firewall capabilities that can be turned on and off as needed.
This prevents double-natting when behind an ISP router.
While maintaining the ACL-capbilities for enhanced network security.
What is your view here?
Cheers - Will
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@Clive_A Looks like Unifi has beat TP-Link to the punch: https://www.youtube.com/watch?v=hSmrcHbl03U
- Copy Link
- Report Inappropriate Content
@Clive_A Thank you for updates. Would you know if this update will allow for dsabling NAT on a per-WAN interface basis, or will it be all NAT enabled or all NAT disabled, for all WAN interfaces?
Thank you,
Lee
- Copy Link
- Report Inappropriate Content
Hi @Lee21
Thanks for posting in our business forum.
Lee21 wrote
@Clive_A Thank you for updates. Would you know if this update will allow for dsabling NAT on a per-WAN interface basis, or will it be all NAT enabled or all NAT disabled, for all WAN interfaces?
Thank you,
Lee
No. I don't have this information. Based on what the forum asked, it did not specify whether this is going to be the per-WAN interface.
I assume it is a global disable for all WAN interfaces.
- Copy Link
- Report Inappropriate Content
FYI:
After weeks of testing/engineering I was able to resolve this by replacing the KPN/ISP router with a Fritz!box model.
Besides replacing the Omada router with a basic L3 switch/router (i.e. the Omada SG2218).
The blocking issue was static routes on the KPN/ISP router: this was not supported.
Hence the replacement with a Fritzbox, static route support and the KPN/ISP profile.
At this time the switch is default gateway for all vlans (with Pihole/DNSMASQ as DHCP/DNS server).
The Omada router is doing nothing... no double NAT (NAT-ing is only on the Fritz!box)... switching it off... at least for now... :-)
- Copy Link
- Report Inappropriate Content
@Clive_A Please confirm if the ability to disable NAT will be extended to the ER8411 running under a controller also. Thank you.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 34
Views: 5703
Replies: 55
Voters 33
![voter's avatar](https://static-community.tp-link.com/icon/c188b9abc4a544f59a7962a438df2174.jpeg)
![voter's avatar](/avatar/avatar-23.png)
![voter's avatar](/avatar/avatar-12.png)
![voter's avatar](/avatar/avatar-11.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](https://static-community.tp-link.com/icon/57d94885dda247099ec65a4e7e1ec261.jpeg)
![voter's avatar](/avatar/avatar-18.png)
![voter's avatar](/avatar/avatar-1.png)
![voter's avatar](/avatar/avatar-15.png)
![voter's avatar](/avatar/avatar-17.png)
![voter's avatar](/avatar/avatar-3.png)
![voter's avatar](https://static-community.tp-link.com/icon/ca9684a079894805804f6a9e939d1ddb.jpeg)
![voter's avatar](/avatar/avatar-13.png)
![voter's avatar](/avatar/avatar-3.png)
![voter's avatar](https://static-community.tp-link.com/icon/5ce2bc1760434758b60ed5a5afc8b511.jpeg)
![voter's avatar](/avatar/avatar-23.png)
![voter's avatar](/avatar/avatar-7.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/avatar-17.png)
![voter's avatar](/avatar/avatar-23.png)
![voter's avatar](/avatar/avatar-4.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](/avatar/avatar-18.png)
![voter's avatar](/avatar/avatar-8.png)
![voter's avatar](/avatar/avatar-25.png)
![voter's avatar](/avatar/avatar-4.png)
![voter's avatar](/avatar/avatar-21.png)
![voter's avatar](/avatar/default.png)
![voter's avatar](https://static-community.tp-link.com/icon/d316275085ef4300a690ab5a2af41fdb.jpeg)
![voter's avatar](/avatar/avatar-7.png)
![voter's avatar](https://static-community.tp-link.com/icon/9bf0a9a7d1db4686ac97d79f8d0d8a73.jpeg)
![voter's avatar](/avatar/avatar-22.png)
![voter's avatar](https://static-community.tp-link.com/icon/5654c47b4d0f4cf0b4ce58b430b7e122.jpeg)