How to configure One-to-One NAT on the Linksys Gigabit VPN Router

One-to-One NAT is a feature of the Linksys Gigabit VPN Router where you can configure the router with multiple IP addresses issued by your Internet Service Provider (ISP) and map them to intranet devices with virtual IP Addresses.

Configuring the One-to-One NAT feature of your router creates one-to-one mapping between a public IP address and a private IP address of a local host.  You can also map a private IP Address range to a public IP Address range of equal instances (e.g. five (5) private addresses and public addresses).  The first virtual address will be mapped to the first external address.
For instance, you have an FTP server in a local network with an IP address of, and public IP address range of to as provided by your ISP.  The IP address is used as WAN IP address of your LRT router, while is used for FTP server.
Follow the steps below to learn how to configure the One-to-One NAT feature:
Step 1:
On your web browser, access your Linksys Gigabit VPN router’s web-based setup page.  For instructions, click here.
Step 2:
Click Configuration.

Step 3:
Click Setup > Network.

Step 4:
Under the WAN SETTING section, click the Edit button next to the WAN1 interface. 
 Step 5:
Configure the WAN CONNECTION setting as provided by your ISP then click Save.
Step 6:
Click on Setup > One-to-One NAT.
Step 7:
Check the Enable One-to-One NAT box. 

Step 8:
Check the IP address range of the computers you want to map to public IP.

NOTE:  In this example, we will use the IP range of ~ for eight (8) computers.

Step 9:
Enter the values for Private Range Begin, Public Range Begin and Range Length.
  • Private Range Begin – This is the initial Private IP address for the Intranet One-to-One NAT function.
  • Public Range Begin – Enter the Public IP address issued by the Internet Service Provider (ISP).
  • Range Length – Enter the number of IP addresses that will be mapped to your virtual IP addresses.  Do not include the IP addresses in use by the WAN port.
QUICK TIP:  You can also fill private IP address in Public Range Begin field.  The application can be used to the NAT environment such as your LRT under another router.  It translates a private IP address of the LAN side to a private IP address of the WAN side.
Step 10:
Click the sf49886-008_en_v2.png button.
NOTE:  The Private IP address should be under the default VLAN 1 network.  The default network is
After completing the above setup, you can start accessing the FTP server in the local network using a public IP address from the WAN side.

Was this support article useful?

Additional Support Questions?
Search Again