Skip to main content
KenjiKang
Explorer III
September 9, 2025
Solved

How to destination NAT a secondary IP address

  • September 9, 2025
  • 1 reply
  • 384 views

Hi,
I am considering using destination NAT on the secondary IP address of the internet-facing port to build a DMZ network.

Although I were able to configure destination NAT for the secondary IP address, but it is not working.

My hypothesis is that the product's specifications might prevent a secondary IP address from being used for destination NAT.
I appreciate any advice from someone with knowledge on this.


Thanks,
Kenji

Best answer by funkylicious

hi,

if the secondary IP is from a different network than your main/primary wan that is routed by your ISP is most likely not routed by them, you should confirm with them.

 

there should be no issues with using secondary IP ( not necessary though to have it as set secondary, as long that the subnet/ip is routed correctly - just use it as VIP ) for DNAT/VIP .

1 reply

funkylicious
SuperUser
SuperUser
September 9, 2025

hi,

if the secondary IP is from a different network than your main/primary wan that is routed by your ISP is most likely not routed by them, you should confirm with them.

 

there should be no issues with using secondary IP ( not necessary though to have it as set secondary, as long that the subnet/ip is routed correctly - just use it as VIP ) for DNAT/VIP .

"jack of all trades, master of none"