Network Address Translation (NAT) is the virtualization of Internet Protocol (IP) addresses. NAT is described in general terms in IETF RFC 1631. It conserves the number of globally valid IP addresses a company needs, and in combination with Classless Inter-Domain Routing (CIDR), has done a lot to extend the useful life of IPv4. NAT gateways sit between two networks, the inside network and the outside network. Systems on the inside network are typically assigned IP addresses that cannot be routed to external networks (e.g., networks in the 10.0.0.0/8 block). A few externally valid IP addresses are assigned to the gateway and the gateway makes outbound traffic from an inside system appear to be coming from one of the valid external addresses. The NAT mechanism ("natting") is a router feature, and is often part of a corporate firewall. NAT gateways can map IP addresses in several ways: - From a local IP address to one global IP address statically;
- From a local IP address to any of a rotating pool of global IP addresses a company may have;
- From a local IP address plus a particular TCP port to a global IP address or one in a pool of ports;
- From a global IP address to any of a pool of local IP addresses on a round-robin basis.
A newer role for NAT focuses on translating IPv4 addresses to IPv6, and vice versa, to provide integration of IPv4 infrastructure and end-nodes into IPv6 environments and allow IPv6 services to interact with IPv4 systems. |
No comments:
Post a Comment