Business Community > Gateways > How to Disable NAT in Controller Mode and Verify its Status
< Gateways

Configuration Guide How to Disable NAT in Controller Mode and Verify its Status

Configuration Guide How to Disable NAT in Controller Mode and Verify its Status

Configuration GuideHow to Disable NAT in Controller Mode and Verify its Status
How to Disable NAT in Controller Mode and Verify its Status
2025-03-19 07:50:07 - last edited 2025-04-25 01:22:16
Tags: #NAT

Background:

 

This post provides a configuration guide on disabling NAT in controller mode and how to verify it after your config.

 

This Article Applies to:

 

It requires both adaptations. If you're not on the proper router firmware and controller version, the Disable NAT option is not displayed.

Omada routers with Disable NAT capability.

The controller is required to be V5.15.20.X or above. 

 

Configuration Steps:

 

1. Log in your Controller.

2. Go to Settings > NAT > Disable NAT.

Default network is 192.168.10.0/24.

 

Name: specify your rule name.

Interface: choose your WAN.

LAN: LAN port(s) that applies to the rule.

Description: describe your rule.

Status: determines whether the rule is effective.

 

Verification:

 

1. Configure the WAN. We use WAN/LAN4 as an example.

 

 

2. Configure the PC which is connected to WAN/LAN4(refer as WAN PC in the following context):

 

 

3. LAN PC:

 

 

4. Ping from the LAN PC to the WAN PC:

 

 

 

5. Wireshark on the WAN PC as the test shows, the disable NAT rule is effective:

Filter syntax: 

ip&&icmp

 

 

You can now ping 192.168.10.6(LAN PC) from 192.168.100.100(WAN PC).

 

Note:

 

1. Configuration steps for Standalone mode are similar.

2. Please note that this will involve an adapted firmware, not just a controller update. Firmware development is a complex process, and timelines may change. Therefore, we cannot provide a specific release date at this time. Please stay tuned to future firmware release notes for updates.

3. When introducing a feature like this, we typically apply it uniformly across all models to ensure consistency and a seamless user experience.

However, it's essential to acknowledge that hardware limitations may exist, which might prevent us from adding the feature to certain models. In such cases, we cannot provide individual notifications explaining the reason. Please note that we cannot guarantee the fulfillment of all requests, and we must set clear expectations upfront.

4. Routing may be required for your setup. It depends on your network scheme.

5. If your ping fails, strongly recommend you refer: 

 

 

Update Log:

 

Mar 19th, 2025:

Release of the article.

 

Recommended Threads:

 

How to Disable NAT on Omada Router

Configuration Guide How to Configure WireGuard VPN on Omada Controller

Get the Latest Firmware Releases for Omada Routers Here - Subscribe for Updates

Get the Latest Omada SDN Controller Releases Here - Subscribe for Updates

 

Feedback:

 

  • If this was helpful, welcome to give us Kudos by clicking the upward triangle below.
  • If there is anything unclear in this solution post, please feel free to comment below.

 

Thank you in advance for your valuable feedback!

 

------------------------------------------------------------------------------------------------

Have other off-topic issues to report? 

Welcome to > Start a New Thread < and elaborate on the issue for assistance.

  1      
 
  1      
 
#1
Options
6 Reply
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-20 19:29:28

  @Clive_A 

Hi Clive,

why a user would want to do that?

I mean, what's the rationale behind this?

 

Thank you,

Fra

  0  
  0  
#2
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-21 00:42:39

Hi @nicolati 

Thanks for posting in our business forum.

nicolati wrote

  @Clive_A 

Hi Clive,

why a user would want to do that?

I mean, what's the rationale behind this?

 

Thank you,

Fra

You can discuss this with the users who requested it. This is the original post for such a feature:

https://community.tp-link.com/en/business/forum/topic/599954

  0  
  0  
#3
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-21 01:21:02

I can confirm this works on both routers with adapted firmware so far (7206 v2 and 8411)

As for why anyone would want this over one-to-one NAT, which i think is a far better way of achieving what is essentially the same thing, im not sure.

Main: ER8411 x1, SG3428X x1, SG3452 x1, SG2428LP x1, SG3210 x1, SG2218P x1, SG2008P x3, ES208G x1, EAP650 x6 Remote: ER7206 v2 x1, ER605 v2 x3, SG2008P x2, EAP650 x2, ES205G x1 Controller: OC300
  0  
  0  
#4
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-24 11:09:37

  @nicolati 
If I'm correct this is useful if you use the omada router behind an additional router to avoid double NAT. Example my provider does not support any thing if the first router is not rent from his company

  0  
  0  
#5
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-24 11:34:45

  @ReneH 

Oh ok, got it!

In my case, I have Fastweb in Italy and I have their router as first one, but I have enabled the traffic forward, so the router is just forwarding everything to a specific IP, which is my ER605v2.

I'm not sure the first router is still using NAT or not, but I was able to make it work without any issue.

That's why I didn't get what Disable NAT feature was good for! :)

 

Thank you,

Fra

  0  
  0  
#6
Options
Re:How to Disable NAT in Controller Mode and Verify its Status
2025-03-24 13:00:01

  @nicolati Double NAT will mostly work without problems but it's not the best solution, some service can have issues. If you forward like you describe it's mostly double NAT.

  0  
  0  
#7
Options

Information

Helpful: 1

Views: 3279

Replies: 6

Tags

NAT
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.