EdgeRouter - Routing: How to Distribute Public IPs


This article will describe methods to distribute Public IPs using the EdgeRouter with steps to implement each method.

Applicable to the latest EdgeOS firmware on all EdgeRouter models. Knowledge of the Command Line Interface (CLI) and basic networking knowledge is required. Please see the Related Articles below for more information.
Devices used in this article:

Table of Contents

  1. Introduction
  2. How to Distribute Using 1:1 NAT
  3. How to Distribute Using a Transit Address
  4. Related Articles


Back to Top

There are several different methods to distribute an assigned block of Public IPs to multiple devices. The preferred method is to use 1:1 NAT when limited Public IP Addresses are available. In this case each host on the network has a private IP and it translates to a specified Public IP created on the WAN interface.  

Another method is when an upstream provider gives a Public IP block using a transit address, in which case the Public IPs can be distributed directly on the router interface or split into multiple smaller subnets.

How to Distribute Using 1:1 NAT

Back to Top

One advantage of this method is that Public IPs are not used simply to distribute other usable IPs, making this method most efficient. Follow the steps bellow to configure.

EdgeRouter Port Configuration

  • eth0 (WAN) - &
  • eth1 (LAN) -


GUI: Access the Graphical User Interface.

1. Add Public IP addresses being used to the WAN interface.

Dashboard > eth0 > Actions > Config > Add IP +

Manually Define IP Address > Address:
Manually Define IP Address > Address:
Proxy ARP: Checked 
NOTE: When using 1:1 NAT with multiple Public IPs it is required to manually add each IP and check Proxy ARP.

2. Configure Source NAT Rule.

This step will send all traffic from the UNMS server outbound using

Firewall/NAT > NAT > Add Source NAT Rule

Outbound Interface: eth0
Translation > Specify address and/or port: Checked
Translation > Specify address and/or port > Address:
Source Address:
Protocol: All Protocols

3. Configure Destination NAT Rule.

This step will send all traffic destined to to the UNMS server at

Firewall/NAT > NAT > Add Destination NAT Rule

Inbound Interface: eth0
Translation Address:
Protocol: All Protocols
Destination Address:

How to Distribute Using a Transit Address

Back to Top

In this topology the upstream provider has given the Public IP block using the transit address. This diagram below shows an example using UFiber GPON equipment to distribute a unique Public IP to multiple customer devices. This method can also be applied using airMAX equipment or a simple switch to distribute the public IPs.

EdgeRouter Port Configuration

  • eth0 (WAN) -
  • eth1 (Public IP Block) -


NOTE: The example above shows a UFiber ONU in router mode with address The other ONUs are in bridge mode giving the airCube and EdgeRouterX a Public IP. The gateway for each device in the network is the address on eth1 of the EdgeRouter Infinity, The UFiber OLT does not receive a management IP from the public IP block and acts simply as a transparent bridge.

Related Articles

Back to Top

EdgeRouter - Hairpin NAT

Intro to Networking - Network Address Translation (NAT) and the Internet

EdgeRouter - Source NAT

EdgeRouter - Destination NAT

We're sorry to hear that!