Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.x

PDF

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.x

NAT/PAT for URWB

Updated: September 14, 2026

Want to summarize with AI?

Log in

Outlines NAT/PAT functionality for URWB networks, including support for AGV mobility, IP and port mapping to WAN addresses, traffic flow management, policy-based configuration, and port address translation for accessing multiple services via single external IPs.

Network address translation for URWB is a networking feature that:

  • provides NAT/PAT functionality for AGV use cases when the URWB mobility feature is enabled,

  • allows network administrators to map local IP addresses and ports to wide area network (WAN) addresses, and

  • manages traffic flow between on-board local networks and external systems.

Key features of NAT/PAT for URWB

Policy-based management: NAT/PAT configuration is integrated into the URWB network profile, ensuring consistent application across devices.

Port address translation: Enables multiple internal services to be reached via a single external IP address using different port mappings.

Guidelines for NAT/PAT configuration

Follow these guidelines to ensure stable NAT/PAT performance:

  • Avoid port overlap: When defining the NAT outside port range, ensure that the selected range does not overlap with reserved system ports. The following ports are strictly reserved for internal system operations and must be excluded from your configuration: 651, 5246, 5247, 6600, and 6610. Configuring a range that includes these ports will result in a validation error.

  • Observe rule limits: You can configure a maximum of 100 rules per device.

  • Monitor table size: To prevent resource exhaustion, the NAT translation table is limited to 4096 entries.

Configure NAT/PAT for URWB (GUI)

Enable and configure NAT/PAT translation rules for URWB mobile units.

Use this task to allow communication between devices on an on-board local network and the WAN. This configuration is managed within the URWB network profile.

Before you begin

  • Ensure the URWB mobility feature is enabled on the access point.

  • Identify the IP address and netmask for the local network.

Follow these steps to configure NAT/PAT for URWB:

Procedure

  1. Choose Configuration > Tags & Profiles > URWB Network Profile.

  2. Click Add or select an existing profile.

  3. In the General tab, enable the URWB status to edit the profile.

  4. In the Mobility tab, from the Mobility Role drop-down list, choose Client.

    • Base

    • Base Relay

    • Client

    When you select Base or Base Relay as the mobility role, the Wired Ports tab is displayed. When you select Client as the mobility role, the Wired Clients tab is displayed.

  5. In the Wired Clients tab, under the NAT section, check the NAT check box to enable Network and Port Address Translation (NAT/PAT) feature.

  6. In NAT Address, enter the IPv4 address of the AP facing the on-board local network and enter the subnet mask associated with the NAT address.

  7. Enter the Outside Port Range. Specify the minimum and maximum port range for outside port rule value. The range is from 1 to 65535 unless both are 0.

  8. In the NAT rules section, click the Add Rule button to add a NAT/PAT configuration rule that contains protocol information, Inside IP Address, Inside Port, and Outside Port. The range for the port numbers is from 1 to 65535.

    Note
    You can configure up to 100 rules. The target host shall be located within the configured inside network address space.

  9. Click Save to add the new rules to the table and then click Update & Apply to Device.

NAT/PAT translation rules are applied, enabling devices on the local on-board network to communicate with external networks through the WAN.

Configure NAT/PAT for URWB

Enable and configure NAT/PAT translation rules for URWB mobile units.

Use this task to allow communication between devices on an on-board local network and the WAN. This configuration is managed within the URWB network profile.

Before you begin

  • Ensure the URWB mobility feature is enabled on the access point.

  • Identify the IP address and netmask for the local network.

Follow these steps to configure NAT/PAT for URWB:

Procedure

  1. Use the configure terminal command to enter the global configuration mode.

    Example:

    Device# configure terminal

  2. Use the wireless profile urwb urwb_profile_name command to access the URWB profile configuration mode.

    Example:

    Device(config)# wireless profile urwb URWB_PROFILE

  3. Use the nat enable command to enable the NAT feature.

    Example:

    Device(config-wireless-urwb-profile)# nat enable

  4. Use the nat address ip_address netmask netmask command to define the inside IP address and netmask for the local network.

    Example:

    Device(config-wireless-urwb-profile)# nat address 192.168.0.1 netmask 255.255.255.0

  5. Use the nat rule {tcp| udp} outside-port inside inside-ip inside-port command to add NAT port forwarding rules.

    Example:

    Device(config-wireless-urwb-profile)# nat rule tcp 30022 inside 192.168.0.58 22

    In this example, TCP traffic received on outside port 30022 is forwarded to 192.168.0.58 on port 22.

    The target host shall be located within the configured inside network address space.

  6. (Optional) Use the nat outside range min min max max command to set the outside port range.

    Example:

    Device(config-wireless-urwb-profile)# nat outside range min 25001 max 30000

  7. Use the end command to exit to privileged EXEC mode.

    Example:

    Device(config-wireless-urwb-profile)# end

  8. (Optional) Use the show wireless profile urwb detailed urwb_profile_name command to verify the configuration.

    Example:

    Device# show wireless profile urwb detailed URWB_PROFILE

  9. (Optional) Use the show ip nat translations command to display the current NAT translation mappings on the AP.

    Example:

    Device# show ip nat translations