If you have multiple public IP addresses (i.e. a subnet allocated by your ISP as opposed to just a single IP address), it is possible to configure the DrayTek units that support multiple IPs in a flexible way using NAT, Multi-NAT/WAN IP Alias and IP Routing. The preferred method is often to use WAN IP Alias to minimise the direct exposure from unsolicitied incoming traffic via NAT but a non-NAT configure can also be setup.
Using IP Routing, IP Addresses can be routed directly through to the LAN side directly without applying NAT to that traffic, which can be useful for placing servers or other devices behind the router; This configuration would mean that the device uses a public IP Address directly.
IP Routing can be used in addition to the WAN IP Alias feature, but IP addresses allocated as IP Aliases are removed from the pool of addresses usable by the IP routed subnet.
This example will use the following IP address details:
| Network Address | 198.51.100.152 |
| Broadcast Address (Not Used) | 198.51.100.159 |
| Subnet Mask | 255.255.255.248 |
| First Usable IP | 198.51.100.153 |
| Last Usable IP | 198.51.100.158 |
The router will use 198.51.100.153 as the address for IP routing and clients would use an IP address available in that range, with 198.51.100.153 as their gateway.
Client Setup
For instance this server is configured to use one of the IPs available in the range: 198.51.100.154, with the router's IP routing address as the Gateway:
There are two methods to set this up on a DrayTek router:
Dedicated LAN Interface - This uses a separate LAN interface in Routing mode to route the public IP addresses through, this requires either a dedicated LAN port on the router or the use of VLAN tags (on a separate switch)
NAT & Routed Shared LAN Interface - This would add the routed subnet to the router's LAN1 interface, which is a NATted subnet.
{tab Dedicated LAN Interface}
Dedicated LAN Interface for Public Subnet
To set up a dedicated LAN interface for routing purposes, the router will first of all need to have VLANs enabled, go to the LAN > VLAN page to configure that. This guide will use LAN2 as the routed subnet, with two ports dedicated to this interface.
A recommended configuration is shown below, with just ports 5 and 6 set as members of VLAN1, which is set to link to LAN2. Please note that VLAN Tag does not need to be enabled for this configuration to operate and on wireless models, each SSID must be a member of a VLAN to apply the changes to the VLAN settings.
Clicking OK on this page will prompt the router to restart, allow it to restart to apply the VLAN changes - please note that ports 5 and 6 are not connected to an enabled network at the moment so will not be usable until this configuration is completed.
Go to LAN > General Setup, on that page, the settings for the additional LANs on the routerwill no longer be greyed-out so click on the LAN2 Details Page button to configure the routing settings for that network.
On that page, set the Network Configuration to Enable and select the For Routing Usage radio button.
The IP routed address in this case is set to 198.51.100.153 and the Subnet Mask is set to 255.255.255.248.
The DHCP Server Configuration can be enabled if required - if that will be used, set the Start IP, IP Pool Count and Gateway IP address to the correct values for the public subnet.
Click OK on that page, at which point the router will prompt to restart, click OK to restart the router and apply the changes: 
Once the router has restarted, the IP Routed subnet will be available as part of the LAN2 network and any devices connected to the ports linked to LAN2 will be able to the available addresses in the public subnet, These devices would need to use the router's gateway address of 198.51.100.153 and the subnet mask of 255.255.255.248 to operate.
If DHCP is enabled those will be given out automatically.
To add additional LAN ports to the LAN2 routed subnet network, go to the LAN > VLAN page and set those ports to be members of VLAN1/LAN2 instead of the default of VLAN0/LAN1.
{tab Shared LAN Interface - NAT & Routed}
Shared NAT & Routed (public subnet) LAN Interface
To set up a routed subnet that will work alongside the router's LAN1 subnet, go to LAN > General Setup and go to the Details Page for the IP Routed Subnet, this is a subnet dedicated to working as a routed interface in addition to LAN1 (which is specifically NATted subnet otherwise). If using VLANs, the IP Routed Subnet is part of LAN1:
On that page, set the interface to Enable and configure the IP address to a usable address from the public subnet range, in this case, the IP Address is 198.51.100.153 and the Subnet Mask is 255.255.255.248. The DHCP settings on this page can be configured to provide limited DHCP functionality to this subnet on specific ports or for specific MAC addresses.
For additional DHCP functionality, use the Dedicated LAN Interface method instead.
Click OK on this page to apply the changes, the router will then prompt to restart, which it will need to do for the IP routing changes to be applied:
Once the router has restarted, the IP Routed subnet will be available as part of the LAN1 network and any devices configured with an IP address in the IP routed IP range will be able to access the internet. These devices would need to use the router's gateway address of 198.51.100.153 and the subnet mask of 255.255.255.248 to operate.
{tab Troubleshooting}
IP Routing - Troubleshooting
If you experience issues with the routed subnet such as Internet access not working for routed IP addresses, check that the router is allowing this traffic through the Firewall in [Firewall] > [General Setup].
Check the Block Routing Packet from WAN setting. If enabled, this would block incoming routed packets unless there's a matching Firewall Filter Rule to allow that traffic in:
{/tabs}
Comments
0 comments
Please sign in to leave a comment.