Configuring Non-NAT (Netgear DG834 -> Netscreen NS5GT)

Posted on 2005-04-13
Last Modified: 2008-01-09
Hello all,

Apologies if this is more of a hardware question.

We've recently had to swap out a BT ADSL router (5861?) in favour of a new Netgear DG834 ADSL router. During this operation our external IP's supplied by Demon have also changed (don't ask). The new router needs to be configured for Non-NAT and needs to connect to our existing Netscreen NS5GT router/VPN/firewall solution.

The previous BT box had, as far as I'm aware, only the external IP (ie it didn't have one of our internal 10.0.0.X IP's) and this routed straight through to the Netscreen firewall. As I could never look at how the BT box was set up I am a little unsure as to how to configure the DG834 for Non-NAT, straight through routing. I have disabled the NAT option, but still no traffic will pass any further then the Netscreen firewall.

So far I have configured the DG834 to correctly connect to the ADSL (I can ping out from diagnositcs) and I have assigned it the router IP given by our ISP. I have, however, assigned this to both the external and internal addresses, as I was unsure as to how to get the Non-NAT setup passing straight through.

Any guidence would be greatly appreciated!

Question by:tjp6685

    Author Comment

    I should also mention that I have adjusted the Netscreen settings to reflect the change in external IP that we have undergone - sorry
    LVL 23

    Expert Comment

    by:Tim Holman
    Why don't you want to use NAT ?  You're going to have to use it at some point !  :)
    If you don't use NAT, then you will need 3 IP address from your ISP - for both interfaces on the Netgear, plus the Netscreen ?  

    Author Comment

    I'm not using NAT because there are several devices that need specific public IP addresses, like our mail server. NAT is enabled on the Netscreen, later on, to deal with the LAN.

    Author Comment

    I have found that  the non-NAT setup for my new router was in fact correct. It seems that the old Netscreen firewall had frozen. After a couple of reboots and resetting the firewall rules everything is now working again.
    LVL 23

    Expert Comment

    by:Tim Holman
    It all depends how many IP address you've got to play with.
    If you have enough that you can split into two subnets, then you don't need NAT on the outside, but if you've only one or two external IPs, then the only way to get things working would be with NAT.
    You can always do double NAT - ie NAT a public address to a private on the external router, and then NAT the private back to a public on the internal router - this is quite a common configuration with ISPs (who should know better !)
    LVL 5

    Accepted Solution

    Closed, 500 points refunded.
    Site Admin

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    PC and VOIP network issues 1 38
    OSPF Routing Problems 9 49
    Sonicwall - user objects - usage 2 17
    Enterasys QoS setup 2 21
    Join Greg Farro and Ethan Banks from Packet Pushers ( and Greg Ross from Paessler ( for a discussion about smart network …
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now