NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
rsisson
Nov 07, 2012Aspirant
FVS336GV2 Nat or Routing ?
I am trying to secure our home network a bit more before it gets "tested".
I understand NAT, and I understand Routing. What I don't understand is how the FVS336GV2 can do routing without NAT or if that is what it is doing.
On my Network Configuration - WAN Mode, I can choose "Use NAT or Classical Routing between WAN & LAN interfaces?"
What does "Classical Routing" do differently and is it any better than NAT?
I Google'd this and found lots of stuff on NAT and firewalls and software vs hardware and more, but nothing that compared NAT vs Routing in the same device...
I understand NAT, and I understand Routing. What I don't understand is how the FVS336GV2 can do routing without NAT or if that is what it is doing.
On my Network Configuration - WAN Mode, I can choose "Use NAT or Classical Routing between WAN & LAN interfaces?"
What does "Classical Routing" do differently and is it any better than NAT?
I Google'd this and found lots of stuff on NAT and firewalls and software vs hardware and more, but nothing that compared NAT vs Routing in the same device...
- I'm not so sure that you understand NAT or why it's necessary.
Answer this question - do you need to share a single public ip between multiple devices - or in the case of a dual WAN router such as the FVS336G, two public ip addresses?
If the answer is yes, then classic routing is not an option, you MUST use NAT and this is why you're unlikely to see a comparison between the two - consider them mutually exclusive options, that do different things.
If you used the FVS336 as a classic router connected to the internet (and yes, you can use it that way), you're going to need a public routable ip address for every device on it's LAN interface
16 Replies
- jmizoguchiVirtuosoclassical routing removed the NAT .
use NAT all times for regular setup unless you have useable IP from ISP that you want use on devices on LAN - jmizoguchiVirtuosoWAN Mode
The WAN mode page allows you to configure how your router should use your external Internet connections, for example your WAN1 and WAN2 port connections.
NAT is a technique which allows several computers on a LAN to share an Internet connection. The computers on the LAN use a "private" IP address range while the WAN port on the router is configured with a single "public" IP address.
Along with connection sharing, NAT also hides internal IP addresses from the computers on the Internet.
NAT (Network Address Translation)
Select NAT if your ISP has assigned only one IP address to you. The computers that connect through the router will need to be assigned IP addresses from a private subnet (example: 192.168.1.0). If your ISP has assigned an IP address for each of the computers that you use, select Classic Routing. - fordemMentorI'm not so sure that you understand NAT or why it's necessary.
Answer this question - do you need to share a single public ip between multiple devices - or in the case of a dual WAN router such as the FVS336G, two public ip addresses?
If the answer is yes, then classic routing is not an option, you MUST use NAT and this is why you're unlikely to see a comparison between the two - consider them mutually exclusive options, that do different things.
If you used the FVS336 as a classic router connected to the internet (and yes, you can use it that way), you're going to need a public routable ip address for every device on it's LAN interface - crowlandAspirantThis has been suggested on various pages returned from a google search as the way to disable SPI on this router. I need to use NAT and disable SPI. Is there a way to do that?
- jmizoguchiVirtuosoLook under firewall tab and SPI should be there
- crowlandAspirantI do not see it under the Security->Firewall menu option.
Under the Attack Checks tab I see Enable Stealth Mode, Block TCP Flood, and Block UDP Flood all of which are unchecked. Not under the Advanced tab either. - jmizoguchiVirtuosoTop of my head I may didn't pointed but right tab but you already saw what you should have seen so
Location you mention is the only place to look - crowlandAspirantSo there is no way to do this?
- jmizoguchiVirtuosoUse NAT and don't open the ports would mostly fine
Go to GRC.com and run shields up and if you pass well then you should be ok - crowlandAspirantDoes running shields up disable SPI? From what I can tell it does not do that.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!