< Knowledge Base

Use a Public IP on LAN using "IP Routed Subnet" Interface

Published On: Mar 23, 2018 

If our ISP allocates a block public IP addresses for us, then we may use the public IP address with IP Routed Subnet or Routing Usage LAN.

Suppose ISP provides a public IP subnet for us, and the gateway IP is The public IP addresses we can use are between to The following shows how to set up a non-NAT subnet so that the server behind Vigor Router can use the public IP address

network topology

WAN Setup

Go to WAN >> Internet Access and configure the WAN connection according to what ISP provides. (Note: If it is necessary to specify an IP address manually, remember that subnet mask for WAN interface should be larger than that of LAN interface.)

LAN Setup

1. Go to LAN >> General Setup, click on Details Page for IP Routed Subnet.

2. Set up TCP/IP details for IP Routed Subnet.

  1. Enable IP Routed Subnet
  2. Enter the IP Address for the router. Note that this could be the same as router's WAN IP
  3. Enter the Subnet Mask according to ISP.
a screenshot of DrayOS

3. For the host behind Vigor Router to obtain the public IP address, we may either:

    • Configure a fixed IP/Subnet Mask on the host
    • Set up DHCP IP Pool, enable Use LAN Port, and connect the host to the router on the specified LAN port (which is port 1 and 2 in this example)

    • Set up DHCP IP pool, enable Use MAC Address, add the host's MAC address to the table, and connect the host to the router from any of the LAN ports.

After finishing above configurations, host with a public IP mask Gateway IP will be able to access Internet through Vigor Router.

1. Go to WAN >> General Setup, configure a WAN profile according to what ISP provides.

2. Go to LAN >> General Setup, select the LAN profile you want to use the public IP address. At More Subnet field, click Add to add a subnet as follows:

  • IP: The router's LAN IP (this can be the same IP as Vigor3900's WAN IP)
  • Subnet Mask: the subnet you want to use on LAN, this should be equal to or smaller than the Subnet Mask configured on WAN.
  • Mode: ROUTING
  • Save and then Apply the LAN profile.

3. Go to Routing >> Static Route >> LAN/WAN Proxy ARP, bind the LAN profile and the WAN profile.

LAN/WAN Proxy ARP is the function to make Vigor3900 respond to the ARP request for the selected LAN network from the WAN side. For instance, if the Routing LAN PC use IP in Vigor3900's LAN network and Vigor3900 receives the ARP request of this IP from its WAN interface, with LAN/WAN Proxy ARP enabled, Vigor3900 will respond the ARP request to WAN Gateway. If there is only a LAN client using the public IP in the Routing LAN, we can configure the LAN client's IP only (with the subnet mask 32).

4. For the LAN host using the public IP, configure the static IP address at TCP/IP configuration, where the IP address should be different from that of the router, the subnet mask should be the same, and gateway should be the router's LAN IP address.

5. At last, go to Routing >> Policy Route. Create a rule to let the Routing LAN network go via the corresponding WAN profile.

create the policy route for the 1st routing lan

Additionally, if there is a second WAN which has public IP addresses for LAN host, you may add more subnet in the LAN profile.

Specify the second IP range to the second WAN at Routing >> Static Route >> LAN/WAN Proxy ARP.

And then create a policy route rule to let the second Routing LAN go out through the corresponding WAN interface.

create the policy route for the 2nd routing lan

Was this helpful?     

Related Articles