NAT Forwarding

The settings for NAT forwarding can be found in the context menu under Antcas Control ▸ Infrastructure ▸ Server ▸ Network.

To allow devices from another network (e.g., a VPN connection) to access the local network, you can activate NAT forwarding (masquerading) for selected network interfaces under the Advanced tab.

This forwards data packets between networks with different IP addressing and translates them to the IP address of the respective interface of the Antcas Server when transitioning into the target network. For example, this can enable external access via WireGuard to devices in the local network.

Note: Only static IP addresses are supported for NAT forwarding. The use of DHCP is not possible in this configuration as dynamic address assignments may cause routing or address conflicts.

Access To A Network Behind A NAT

For clients to reach the remote network, the Antcas Server must be used as a gateway or a static route to the target network must be set up on the respective system.

When using most VPN solutions, the required routes are automatically set and packets are forwarded to the network accordingly.

Example Scenario

The following example configures access via eth0. Forwarding is therefore only set on the interface eth0. Conversely, no connection is possible as long as forwarding from eth1 to eth0 has not been activated.

Computer (192.168.1.101/24) ▸ eth0 (192.168.1.100/24) ▸ eth1 (10.0.0.100/24) ▸ Other Server (10.0.0.101/24)

Computer Address: 192.168.1.101/24
Antcas Server eth0: 192.168.1.100/24
Reachable Network eth1: 10.0.0.0/24

Windows

Note: The command prompt must be started as Administrator.

route -p add 10.0.0.0 mask 255.255.255.0 192.168.1.100

macOS

sudo route -n add -net 10.0.0.0/24 192.168.1.100

Linux

sudo ip route add 10.0.0.0/24 via 192.168.1.100