Static NAT configuration on Asus Merlin

[Scheggiaimpazzita]

Hello all,

For web development purposes I need to configure 4 static nat on my asus RT-AC88U. I din't find any menu about that and I'm only use to Cisco/Juniper/Check Point devices to do that and really not so much skilled on linux environment.

To be more explicative, I must configure something like this:
10.10.10.10 in 156.34.10.10
10.10.10.20 in 156.34.10.20
and so on.

Can anyone help?

Thanks in advance

 

[ColinTaylor]

Sorry, asuswrt doesn't support 1:1 NAT.

 

[Scheggiaimpazzita]

Sorry, asuswrt doesn't support 1:1 NAT.

Thanks for prompt reply, no chance even with iptables? I'm running skynet and even I configured iptables to block some home ip cameras to do whatever they want. But as wrote above, I really don't know iptables.

 

[octopus]

Thanks for prompt reply, no chance even with iptables? I'm running skynet and even I configured iptables to block some home ip cameras to do whatever they want. But as wrote above, I really don't know iptables.

Maby you can use this code
https://wiki.dd-wrt.com/wiki/index.php/One-to-one_NAT

 

[ColinTaylor]

I suppose anything's possible if you're willing to reconfigure most of how the router works.

The main issue is that the whole firmware is designed around the premise of having a single WAN IP address (or 2 for dual-WAN), from which it can do a 1-to-many NAT.

 

[Scheggiaimpazzita]

Thanks all. After some hours of reading I finally found an IPTABLES configuration that works and is the following:

iptables -t nat -A INPUT -s <translated destination ip> -j SNAT --to-source=<original destination ip>
iptables -t nat -A OUTPUT -d <original destination ip> -j DNAT --to-destination=<translated destination ip>

iptables is powerful, not really easy to use but it can do almost anything.