Using Multi-NAT with the FVX538 or FVS338 ProSafe VPN Firewall

How to set up a DMZ LAN on FVX538?

Using Multi-NAT with the FVX538 or FVS338 ProSafe VPN Firewall

This describes how to configure multi-NAT to support multiple public IP addresses on one WAN interface of a NETGEAR FVX538 or FVS338 ProSafe VPN Firewall.

By creating an inbound rule, the firewall is configured to host an additional public IP address, and associate that address with a Web server on the LAN. This can be done for many additional addresses by creating an individual rule for each.

This procedure was developed and tested using:

  • NETGEAR FVX538 ProSafe VPN Firewall with version 1.6.12 firmware (Although this firmware is no longer available, the most recent firmware will work similarly).
  • WAN1 IP address is:
  • LAN IP address subnet is:
  • DMZ IP address subnet is:
  • Web server PC on the firewall’s LAN
  • LAN IP address is:
  • Access to Web server is (simulated) public IP address:


IP Address Requirements

If you arrange with your ISP to have more than one public IP address for your use, you can use the additional public IP addresses to map to servers on your LAN or DMZ. One of these public IP addresses is used as the primary IP address of the router. This address is used to provide Internet access to your LAN PCs through NAT. The other addresses are available to map to your servers. The other addresses do not have to be contiguous, or on the same subnet, but your ISP must provide a routing path to them.


Configuring the FVX538 for Additional IP Addresses

  1. Go to the Rules menu.
  2. If your server is to be on your LAN, select LAN-WAN at the top of the rules menu.If using the FVX538 and your server is to be on your DMZ, select DMZ-WAN.
  3. Click Add to create an Inbound Services rule.
  4. In the Add/Edit menu (shown below), select the HTTP service for a Web server.
  5. Select Action ALLOW always.
  6. For Send to LAN Server, enter the local IP address of your Web server PC.
  7. For Public Destination IP Address, choose Other Public IP Address.
  8. Enter one of your public Internet addresses that will be used by clients on the Internet to reach your Web server.
  9. Click Apply.


Your rule now appears in the Inbound Services table of the Rules menu (shown below). This rule is different from a normal inbound port forwarding rule, in that the Destination box contains an IP Address other than your normal WAN IP Address.


Testing the Connection

From a PC on the Internet, type http://<IP_address>, where <IP_address> is the public IP address you have mapped to your Web server. Your Web server’s home page appears.


Clients And Partners

Microsoft Small Business Specialists are partners who recognize that small-business customers have IT needs and who are able to meet those needs with high-quality solutions built on Micrsoft

Global View Computing Company Testimonials

Featured Articles
"I had not had antivirus installed on my computer for at least 7 months ... "
"The ITech Service has been a great asset to Active Environmental. Working with the ... "  ... Mark Johnson, 
manager, NYC
"I just want to thank Chance and his extremely friendly team for always being ... "
"We cannot put into words how grateful we are to have Global View Computing ... "