How to Disable NAT in Controller Mode and Verify its Status

How to Disable NAT in Controller Mode and Verify its Status

How to Disable NAT in Controller Mode and Verify its Status
How to Disable NAT in Controller Mode and Verify its Status
a week ago - last edited a week ago
Tags: #NAT

Background:

 

This post provides a configuration guide on disabling NAT in controller mode and how to verify it after your config.

 

This Article Applies to:

 

It requires both adaptations. If you're not on the proper router firmware and controller version, the Disable NAT option is not displayed.

Omada routers with Disable NAT capability.

The controller is required to be V5.15.20.X or above. 

 

Configuration Steps:

 

1. Log in your Controller.

2. Go to Settings > NAT > Disable NAT.

Default network is 192.168.10.0/24.

 

Name: specify your rule name.

Interface: choose your WAN.

LAN: LAN port(s) that applies to the rule.

Description: describe your rule.

Status: determines whether the rule is effective.

 

Verification:

 

1. Configure the WAN. We use WAN/LAN4 as an example.

 

 

2. Configure the PC which is connected to WAN/LAN4(refer as WAN PC in the following context):

 

 

3. LAN PC:

 

 

4. Ping from the LAN PC to the WAN PC:

 

 

 

5. Wireshark on the WAN PC as the test shows, the disable NAT rule is effective:

Filter syntax: 

ip&&icmp

 

 

You can now ping 192.168.10.6(LAN PC) from 192.168.100.100(WAN PC).

 

Note:

 

1. Configuration steps for Controller mode are similar.

2. Please note that this will involve an adapted firmware, not just a controller update. Firmware development is a complex process, and timelines may change. Therefore, we cannot provide a specific release date at this time. Please stay tuned to future firmware release notes for updates.

3. When introducing a feature like this, we typically apply it uniformly across all models to ensure consistency and a seamless user experience.

However, it's essential to acknowledge that hardware limitations may exist, which might prevent us from adding the feature to certain models. In such cases, we cannot provide individual notifications explaining the reason. Please note that we cannot guarantee the fulfillment of all requests, and we must set clear expectations upfront.

4. Routing may be required for your setup. It depends on your network scheme.

5. If your ping fails, strongly recommend you refer: 

 

 

Update Log:

 

Mar 19th, 2024:

Release of the article.

 

Recommended Threads:

 

How to Disable NAT on Omada Router

Configuration Guide How to Configure WireGuard VPN on Omada Controller

Get the Latest Firmware Releases for Omada Routers Here - Subscribe for Updates

Get the Latest Omada SDN Controller Releases Here - Subscribe for Updates

 

Feedback:

 

  • If this was helpful, welcome to give us Kudos by clicking the upward triangle below.
  • If there is anything unclear in this solution post, please feel free to comment below.

 

Thank you in advance for your valuable feedback!

 

------------------------------------------------------------------------------------------------

Have other off-topic issues to report? 

Welcome to > Start a New Thread < and elaborate on the issue for assistance.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0      
  0      
#1
Options
6 Reply
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

  @Clive_A 

Hi Clive,

why a user would want to do that?

I mean, what's the rationale behind this?

 

Thank you,

Fra

  0  
  0  
#2
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

Hi @nicolati 

Thanks for posting in our business forum.

nicolati wrote

  @Clive_A 

Hi Clive,

why a user would want to do that?

I mean, what's the rationale behind this?

 

Thank you,

Fra

You can discuss this with the users who requested it. This is the original post for such a feature:

https://community.tp-link.com/en/business/forum/topic/599954

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#3
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

I can confirm this works on both routers with adapted firmware so far (7206 v2 and 8411)

As for why anyone would want this over one-to-one NAT, which i think is a far better way of achieving what is essentially the same thing, im not sure.

  0  
  0  
#4
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

  @nicolati 
If I'm correct this is useful if you use the omada router behind an additional router to avoid double NAT. Example my provider does not support any thing if the first router is not rent from his company

  0  
  0  
#5
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

  @ReneH 

Oh ok, got it!

In my case, I have Fastweb in Italy and I have their router as first one, but I have enabled the traffic forward, so the router is just forwarding everything to a specific IP, which is my ER605v2.

I'm not sure the first router is still using NAT or not, but I was able to make it work without any issue.

That's why I didn't get what Disable NAT feature was good for! :)

 

Thank you,

Fra

  0  
  0  
#6
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
a week ago

  @nicolati Double NAT will mostly work without problems but it's not the best solution, some service can have issues. If you forward like you describe it's mostly double NAT.

  0  
  0  
#7
Options