Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am about to get a group of 5 public (external) IP addresses from my ISP. I have a Netgear WNDR3700v2 router. I was told that 1:1 NAT would be the way to assign static public IP addresses to some of my computers, while making the rest use private network IP addresses (issued by a DHCP server), and have all the computers accessible in the same domain network.

Is this possible using my netgear WNDR3700v2 router? If not, what do I need?

I was looking at the Netgear FVS318G wired router, and I would then use my existing router as an access point. Does this make sense?

share|improve this question
up vote 2 down vote accepted

I read the other post you linked to. If your router does not support 1:1 NAT then you have two options:

  1. Use the router as a router and not a NAT device. On the config page you can turn off NATting. You then assign 1 public IP to the router itself on it's LAN interface with the correct subnet (this info will come from your ISP). Then you assign the other public IP's directly to the machines you want accessible on the internet. On one of these machines add a second NIC and configure it with ICS or RRAS to do the NAtting for the other machines that will have private IP's only (otherwise they cannot route out to the internet). Wire the machines with public IP's to your router and wire your machines with private IPs to a separate router/switch to the 2nd NIC on the machine that will act as the NAT device for other PC's. For the machine acting as the NAT I would advise using the one which is the DNS, DHCP server so this can assign IP's out.

  2. Buy a rotuer that supports one to one NAT.

  3. You never said what you want to access on the PC's on the internet? If it is simply remote desktop for example you can set a different port for each PC then port forward through to them with one public IP using your current set up. You can now access every PC on the internet but on one IP instead.

I am assuming you have a certain amount on knowledge but if you don't understand any of that, ask away and I will expand on it.

For solution 1 above, from the link you posted all the computers that have blue arrows are the PC's I said will be connected to the router directly with public IP's (like diagram). Where the web server has a red arrow indicating it has a second NIC which connects to the LAN non of yours will do this except the one acting as the NAT device. The server acting as the NAT device will serve the same function as the device called "NAT/router..." which is on both networks and then two PC's sit behind it. The 2 PC's sat behind this device (which would be your server) will be all your private PC's.

Solution 1 presents its own problems however because if you want to connect to file shares to the machines with public IP's you need to open this up on the firewall. This also means anyone on the internet can potentially connect as well. You can get round this with extensive firewall configuration but for the hassle involved you are probably better just getting a 1:1 NAT router.

share|improve this answer
Thanks. I have decided to go with a new router (the one I mentioned in my post), and turn my old one into a simple access point. I think its the cleanest solution. – Gabriel McAdams Jun 6 '11 at 20:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.