What is NAT and PAT
WHAT IS NAT
Network Address Translation (NAT) is simply that – it takes a network address, and “translates” it to another network address. It is a simple lookup table, where each row is created by a router command with the two addresses. The user address is behind the router on the LAN interface, and the Internet address is sent out across the serial interface.
Static NAT
For security - requires n Internet IP addresses - assign unique, unregistered local IP addresses to all users, and use unique Internet addresses as well. Users can all use the same port.
Static NAT offers enhanced security - the actual IP address of the user is hidden. A router running NAT (RFC1631) allows the users to maintain anonymity, because their addresses are not sent out to the world. Users will typically use addresses from one of three reserved address spaces, the most famous being the “10” Class A address range.
SOURCE
COMPUTER |
SOURCE
COMPUTER'S IP ADDRESS |
NAT ROUTER'S
IP ADDRESS |
A
|
10.0.0.1
|
215.37.32.201
|
B
|
10.0.0.2
|
215.37.32.202
|
C
|
10.0.0.3
|
215.37.32.203
|
Dynamic NAT (NAT & PAT)
for overloading - requires 1 outside Internet IP address - assign unique, unregistered local IP addresses to all users. Must use unique ports for each user !!!
Dynamic NAT allows overloading - multiple users access the Internet via one IP address. This is used by Microsoft ICS (Internet Connection Sharing) and by DSL routers that have several home user PC’s connected. In fact, every Cable/DSL Broadband Router on the market accomplishes its job with NAT.
SOURCE
COMPUTER |
SOURCE
COMPUTER'S IP ADDRESS |
SOURCE
COMPUTER'S PORT |
NAT ROUTER'S
IP ADDRESS |
A
|
10.0.0.1
|
400
|
215.37.32.201
|
B
|
10.0.0.2
|
50
|
215.37.32.201
|
C
|
10.0.0.3
|
3750
|
215.37.32.201
|
No comments