Enable and Configure NAT

Applies To: Windows Server 2008 R2

Network address translation (NAT) allows you to share a connection to the public Internet through a single interface with a single public IP address. The computers on the private network use private, non-routable addresses. NAT maps the private addresses to the public address.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To enable network address translation addressing

  1. In the RRAS MMC snap-in, expand Your Server Name. If you are using Server Manager, expand Routing and Remote Access.

  2. Expand IPv4, right-click NAT, and then click Properties.

  3. If you do not have a DHCP server on the private network, then you can use the RRAS server to respond to DHCP address requests. To do this, on the Address Assignment tab, select the Automatically assign IP addresses by using the DHCP allocator check box.

  4. To allocate addresses to clients on the private network by acting as a DHCP server, in IP address and Mask, configure a subnet address from which the addresses are assigned. For example, if you enter 192.168.0.0 and a subnet mask of 255.255.255.0, then the RRAS server responds to DHCP requests with address assignments from 192.168.0.1 through 192.168.0.254.

  5. (Optional) To exclude addresses in the configured network range from being assigned to DHCP clients on the private network, click Exclude, click Add, and then configure the addresses.

  6. To add the public interface to the NAT configuration, right-click NAT, and then click New Interface. Select the interface connected to the public network, and then click OK.

  7. On the NAT tab, click Public interface connected to the Internet and Enable NAT on this interface, and then click OK.

  8. If you want to add additional public addresses assigned to this interface or configure service and port mappings to computers on the private network, see IPv4 - NAT - Interface - Properties Page.

  9. To add the private interface to the NAT configuration, right-click NAT, and then click New Interface. Select the interface connected to the private network, and then click OK.

  10. On the NAT tab, click Private interface connected to private network, and then click OK.

Additional references