Should the public IP for my NAT be configured on my server?

Question

Should the public IP for my NAT be configured on my server?

Answer

The public IP for the NAT should NOT be configured on the server. The server should only be configured with the private IP of the NAT. The public IP for the NAT will exist in the firewall or other networking equipment that establishes the NAT.

To check if your server has been configured correctly, you can use the following command to list the server's IPs. It should contain the private IP of the NAT, but not the public IP of the NAT.

ip -o a

Note that the public IP for the NAT will be displayed in most parts of cPanel/WHM instead of the private IP of the NAT, such as "List Accounts" for example. DNS Zones should be configured with the public IP information, as these are public-facing records.

If the public IP of the NAT is present, it should be removed. You will first want to perform an IP migration to ensure the sites are on the private IP of the NAT as described below.

How do I move sites on the shared IP to a new Shared IP?

Related

Is a 1:1 NAT required in order to use cPanel and WHM?

Loopback NAT on this IP address appears to be defective

How to troubleshoot FTP connection issues in NAT servers