Nat mode, routing mode, and full mode of the router

Nat mode. In this mode, packets sent from the LAN to the WAN are converted to Nat by default, but the router does not process all packets in the same network segment as the LAN interface. For example, if the IP address of the router LAN port is 192.168.1.1, The subnet mask is 255.255.255.0, And the LAN port CIDR block is 192.168.1.0/24, the router will perform Nat translation when it receives packets whose source address is 192.168.1.123; however, if a packet whose source address is ipv31.76.80 is received, it is discarded directly. Routing mode. In this mode, the host in different network segments can communicate with each other through the corresponding routing settings, but the router does not perform Nat translation. For example, when the DMZ port of the vro。 is in Wan mode, the host in the DMZ region needs to access the server in the WAN through routing. If the Static Routing rules permit, the communication can be normal. In this case, hosts in the LAN cannot access the WAN.

 

Note: In routing mode, all forwarding rules are invalid. Full mode. The full mode includes the NAT mode and the routing mode. In this mode, the router first performs Nat translation on the data packets that meet the NAT forwarding conditions. If not, the Static Routing rules are matched, packets that match successfully are forwarded in the routing mode. packets that fail to match are discarded directly. In this way, the vro allows packet Nat translation and does not block data packets in different network segments from interfaces.