Wireless Modem - NAT and NO-NAT simultaneously?

Need a Wireless Modem / Router that is capable of doing NAT and DHCP on the wireless bit but NO-NAT on the wired bit.

Have 16 public IPs and a linux firewall - want Private (192.168...) addresses handed out via DHCP to all and sundry on the wireless link (outside the firewall) but Public addresses routed via the wired port. (Does not have to support routing, my firewall does Proxy ARP)

Any suggestions?

Edited by deleted (Mon 02-Apr-07 16:35:53)

I suggest you will probably need a wired non-NAT capable router + a separate cable/dsl router with an Ethernet WAN port. That way you can assign one of your public IP's to the cable/dsl router and use the rest for your firewall.

Yes, that is one idea, to have a wireless ethernet gateway behind the firewall, but I would rather only have to buy one device...

I'm sure the Draytek Vigor 2800G can do both Many to Many and Many to One at at the same time...

http://www.draytek.com/demo/Vigor2800/index.htm would certainly seem to indicate that it does. The "1st Subnet" and "2nd Subnet" settings would seem to be what I want.

Thank you.

Any others?

plenty will do this, you just need to RTFM to check them out in detail. "No NAT" is a misnomer as you never need turn NAT off just not use it for some of your IPs. No reason why you can't DHCP on an internal NAT IP range and have static external IPs at the same time on many routers, its the capability to handle the external IP on the LAN side that may be elusive.

Draytek 2600, USR 910x, Zyxel 4-port (wireless version has an option to keep WLAN and LAN traffic separate too) all seem to have the sort of functions you need.

I have a number of routers at home (A BT supplied one and a Linksys) and both of them will not route IPs properly if NAT is turned on.

I think the reason is that I am using a private (192.168) range for the network between the router and the FW, and thus the FW WAN side port has a private address. If NAT is on, then an incoming connection will be NATed and it won't come through the the right port.