# OPC-UA server behind NAT

**URL:** <https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849>\
**Category:** Ignition\
**Created:** [July 21, 2017, 9:35am UTC](https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849 "2017-07-21T09:35:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![CuninganReset](https://avatars.discourse-cdn.com/v4/letter/c/f6c823/32.png) [@CuninganReset](https://forum.inductiveautomation.com/u/CuninganReset)\
**Post date:** [July 21, 2017, 9:35am UTC](https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849/1 "2017-07-21T09:35:41Z")

</div>

Hello.

I have one Ignition into a LAN reachable via NAT, this mean that ignition IP is 192.168.10.20 but to connect to it from outside the IP is 172.17.10.21…

I have created the NAt rule according but once i try to connect to it from other ignition i see that the response endpoint is 192.168.10.20

I have changed into “OPC-UA-\>Settings” the Endpoint Address, and i have rebooted the module first, and later the complete PC to check because i am obtaining the bad endpoint from Ignition OPC-UA.

 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/2/2a8dc8ed165ec031a237f43fcb31949eb68c60c2.png)

But i still obtain the bad endpoint from the server.  
 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/f/f3b0ada2b64a10cf5d3565aca3bdf338a803059b.png)

Anyone knows how to do this??

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [July 21, 2017, 1:10pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849/2 "2017-07-21T13:10:14Z")

</div>

Don’t try to get the server to return 172.17.10.21 in the endpoint URL.

Instead, set the “Host Override” setting for the client connection to 172.17.10.21.

---

<div class="post-metadata">

**Author:** ![CuninganReset](https://avatars.discourse-cdn.com/v4/letter/c/f6c823/32.png) [@CuninganReset](https://forum.inductiveautomation.com/u/CuninganReset)\
**Post date:** [July 21, 2017, 6:05pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849/3 "2017-07-21T18:05:34Z")

</div>

HEllo!

Thanks, it works now!

Muchas Gracias!!

---

<div class="post-metadata">

**Author:** ![Adam\_Bachert](https://avatars.discourse-cdn.com/v4/letter/a/bc79bd/32.png) [@Adam\_Bachert](https://forum.inductiveautomation.com/u/Adam_Bachert)\
**Post date:** [January 2, 2024, 6:59pm UTC](https://forum.inductiveautomation.com/t/opc-ua-server-behind-nat/14849/4 "2024-01-02T18:59:01Z")

</div>

I recognize this post is very old but I'm attempting to do the exact same thing and I'm looking for some clarification. The physical address of my device/OPC server is opc.tcp://192.168.1.1:4840. This is behind a NAT with the WAN set to another network (say 192.168.x.x).

So for the Endpoint URL I would put opc.tcp://192.168.1.1:4840/discovery and for the endpoint host override I would put in just the WAN IP address of 192.168.x.x or I would put in opc.tcp://192.168.x.x:4840/discovery?

Thanks